← Autoridad de Certificacion Firmaprofesional cases
Bugzilla #2025536 Self Reported Incident

Firmaprofesional: Delayed initial CCADB incident reporting (72-hour preliminary / 14-day full) for Bug 2016475

RESOLVED FIXED Autoridad de Certificacion Firmaprofesional
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update. Always refer to the official Bugzilla thread as the authoritative source. If you spot an inaccuracy, let me know via the contact form.
AI Summary

Firmaprofesional reported that, after becoming aware on 2026-02-04 of a delayed CCADB disclosure issue later tracked in Bugzilla #2016475, it did not publish the corresponding preliminary incident report within 72 hours and did not publish the full incident report within 14 days. The CA stated this was a non-conformity with the CCADB Incident Reporting Guidelines for initial incident disclosure timing. Firmaprofesional said the underlying CCADB disclosure issue was corrected on the same day it was identified, but the required initial incident reporting deadlines were not tracked as mandatory deliverables once awareness was established. The thread describes contributing factors including the lack of enforced tracking of the 72-hour and 14-day deadlines at incident awareness/classification. Firmaprofesional completed action items by standardizing and enforcing initial CCADB incident disclosure deadline tracking (72h/14d) and by adding formal owner assignment for preliminary and full incident report publication at incident opening. The bug is marked RESOLVED with resolution FIXED.

Model: gpt-5.4-nano Generated: 2026-06-13 21:38 UTC Revised: 2026-06-16 18:15 UTC Confidence: 0.86 6 comments
Chronology
  1. Firmaprofesional became aware of a delayed CCADB disclosure issue later tracked in Bugzilla #2016475.
  2. Firmaprofesional published the preliminary incident report in Bugzilla #2016475.
  3. Firmaprofesional published the full incident report in Bugzilla #2016475.
  4. Firmaprofesional opened this bug to track delayed initial incident reporting.
  5. Firmaprofesional completed the action items for deadline tracking and ownership.
Thread Activity
  1. Logalty representative — Opened the preliminary incident report stating Firmaprofesional did not publish the preliminary report within 72 hours or the full report within 14 days after awareness on 2026-02-04.
  2. Logalty representative — Posted the full incident report with a timeline, root cause analysis, and action items for enforcing 72-hour/14-day deadline tracking.
  3. Logalty representative — Confirmed the action items due on 2026-03-31 were completed and updated the action items table.
  4. Logalty representative — Posted a report closure summary describing remediation and requesting closure.
  5. CCADB representative — Issued a final call for comments and stated the report would close around 2026-04-14.
  6. Logalty representative — Corrected the report closure summary, reiterating the delayed initial CCADB incident reporting issue and the completed remediation actions.
Participants
Logalty representative CCADB representative
Related Bugzilla IDs Mentioned
Similar Local Cases
#1925293 RESOLVED Repository Issue Self Reported Incident Opened 2024-10-17 · Closed 2025-02-28 · 87% similar
Firmaprofesional: Incorrect publication of information for "Test Website - Revoked" URL in the CCADB.
#2009941 RESOLVED Certificate Misissuance Self Reported Incident Opened 2026-01-13 · Closed 2026-04-06 · 86% similar
Firmaprofesional: Misissuance of TLS Subordinate CA "AC Firmaprofesional - Secure Web 2024"
#1889420 RESOLVED Self Reported Incident Opened 2024-04-03 · Closed 2024-09-04 · 85% similar
Firmaprofesional: Policy Qualifiers other than id-qt-cps present for certificate
#1649726 RESOLVED Self Reported Incident Certificate Misissuance Opened 2020-07-01 · Closed 2023-02-22 · 79% similar
Firmaprofesional: 2020 Audit Report Finding 4 out of 4
#1769240 RESOLVED Ca Certificate Compliance Self Reported Incident Opened 2022-05-13 · Closed 2023-02-22 · 79% similar
Firmaprofesional: 2022 - SSL certificates issued with wrong Organization ID number
#1538638 RESOLVED Ca Certificate Compliance Self Reported Incident Revocation Issue Opened 2019-03-25 · Closed 2023-02-22 · 78% similar
Firmaprofesional: AC Firmaprofesional - INFRAESTRUCTURA insufficient serial number entropy
#1717791 RESOLVED Ca Certificate Compliance Incident Self Reported Incident Opened 2021-06-23 · Closed 2023-02-22 · 78% similar
Firmaprofesional: 2021 Audit Report Finding 2 out of 3
#1717795 RESOLVED Ca Certificate Compliance Incident Self Reported Incident Opened 2021-06-23 · Closed 2023-02-22 · 78% similar
Firmaprofesional: 2021 Audit Report Finding 3 out of 3

We use only essential cookies and local browser storage for preferences and security. See our Privacy Policy for details.

Confirm action