← Government of Spain, Fábrica Nacional de Moneda y Timbre (FNMT) cases
Bugzilla #2050274
Incident
Problem Reporting Failure
Self Reported Incident
FNMT: Delay in incident disclosure reporting for Bug #2049012
ASSIGNED
Government of Spain, Fábrica Nacional de Moneda y Timbre (FNMT)
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
This case concerns FNMT’s incident disclosure reporting delay related to Bug 2049012. In the preliminary incident report, FNMT states that it did not submit a preliminary or full incident report within the 72-hour reporting requirement referenced in the Incident Reporting Guidelines. The report cites CCADB v3.2 incident reporting guidance (“When are reports expected?”). The incident disclosure source is stated as “Third Party Reported.” No remediation steps, timeline, or resolution are provided in the thread content shown. The bug remains in ASSIGNED status.
Chronology
- FNMT opened a CA Certificate Compliance bug stating it missed the 72-hour incident reporting requirement for Bug 2049012.
Thread Activity
- amaya.espinosa@fnmt.es — Submitted a preliminary incident report stating FNMT did not submit a preliminary or full incident report within the 72-hour reporting requirement for Bug 2049012, citing CCADB v3.2 and noting the disclosure was third-party reported.
Participants
amaya.espinosa@fnmt.es
External References
Related Bugzilla IDs Mentioned
Similar Local Cases
certSIGN: Inconsistent revocation status (CRL "revoked" vs OCSP "good") for intermediate CA "certSIGN Web CA"
KIR: OCSP responder does not return status for precertificate
OATI: Misissuance detected by PKIMetal
ANF AC: 2026 Audit Report Finding 1 out of 3
KIR: Failed to respond a Certificate Problem Report within 24 hours
FNMT: Inaccuracy in CRL URL in CCADB
OATI: AIA CA Issuer field pointing to PEM encoded cert
HARICA: Continued issuance and refusal to revoke TLS certificates for EU-sanctioned blocked entities (Sberbank, VTB, KAMAZ, ANO Dialog)