FNMT: Inaccuracy in CRL URL in CCADB

The FNMT CA Program case reports that an incorrect CRL URI was recorded in CCADB for the Certification Authority “AC RAIZ-FNMT RCM G2”. The issue occurred during an update to a root information entry in CCADB, when an incorrect CRL URI was inadvertently recorded in the CRL path field. The reporter states that the problem has been corrected and that the valid URI has been updated in CCADB. The thread cites CCADB Policy Version 2.1, including the requirement for CA Owners to keep CCADB information accurate and to update it in a timely fashion, and the requirement to disclose the complete set of distinct HTTP URLs from the crlDistributionPoints extension for unexpired and unrevoked CA certificates. The bug is currently marked UNCONFIRMED.

1. 2026-06-19 FNMT identified that an incorrect CRL URI was recorded in CCADB for “AC RAIZ-FNMT RCM G2” and updated CCADB with the valid URI.

1. 2026-06-19 amaya.espinosa@fnmt.es — Filed a preliminary incident report stating an incorrect CRL URI was inadvertently recorded in CCADB during a root info update, and that the valid URI was subsequently updated in CCADB.