← China Financial Certification Authority (CFCA) cases
Bugzilla #2058918
Ca Certificate Compliance
Externally Reported Incident
Certificate Misissuance
Revocation Issue
Delayed Revocation
CFCA: Incorrect countryName values in OV subscriber certificates
ASSIGNED
China Financial Certification Authority (CFCA)
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
This case concerns four CFCA OV subscriber certificates that were reported with unexpected ISO 3166-1 country code values in the subject:countryName field. The report states that the issue was third-party reported and cites BR v2.2.8 section 7.1.4.2.2 for the requirement that subject:countryName contain the correct two-letter country code. CFCA later said all four certificates had been addressed within the 5-day timeframe required by BR section 4.9.1.1(13), and one of the certificates had already been revoked before the CPR. The bug remains assigned to CFCA with no resolution shown in the thread.
Chronology
- A CFCA OV subscriber certificate with country code MO was issued.
- A CFCA OV subscriber certificate with country code CF was issued.
- A CFCA OV subscriber certificate with country code CF was issued.
- A CFCA OV subscriber certificate with country code CL was issued.
- CFCA received a third-party report about incorrect countryName values in four OV subscriber certificates.
- CFCA revoked three of the affected certificates, and one had already been revoked before the CPR.
Thread Activity
- China Financial Certification Authority (CFCA) — CFCA opened a preliminary incident report describing four affected certificates and identifying the issue as unexpected country code values in subject:countryName.
- China Financial Certification Authority (CFCA) — CFCA listed the affected certificates, their serial numbers, crt.sh IDs, and the incorrect country codes.
- China Financial Certification Authority (CFCA) — CFCA provided a revocation status update saying all four certificates were addressed within the 5-day timeframe, with three revoked on 2026-07-29 and one already revoked earlier.
Participants
China Financial Certification Authority (CFCA)
External References
Similar Local Cases
CFCA: Delayed response to CPR related with bug 2058918
SSL.com: Invalid Subject stateOrProvince Values
SwissSign: Invalid Entry in State field
D-Trust: EV Subordinate CA missing required cabfOrganizationIdentifier extension
DigiCert: EVG CA profile compliance
TunTrust: OCSP responder "Unknown" of one Pre-certificate
KIR S.A.: Invalid organizationName
Certigna: Pre-certificates not recognised by the OCSP responder