← China Financial Certification Authority (CFCA) cases
Bugzilla #2058920
Ca Certificate Compliance
Incident
Externally Reported Incident
Problem Reporting Failure
Closure Request
CFCA delayed response to a Certificate Problem Report within 24 hours
RESOLVED
FIXED
China Financial Certification Authority (CFCA)
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
This case concerns CFCA’s failure to provide a preliminary response to a Certificate Problem Report within the 24-hour requirement in BR Section 4.9.5. CFCA’s report says the CPR was submitted on 2026-07-27 at 20:50 UTC+8 and the preliminary response was provided at 2026-07-28 21:51 UTC+8, about one hour late. CFCA stated that no subscriber certificates were affected. The report identified process gaps in CPR handling, including lack of leave coverage and an A/B backup mechanism, and a misread of the CPR submission time. CFCA later said all action items were completed and posted a closure report requesting closure. The bug is now resolved with resolution FIXED, and CCADB had issued a final call for comments before the expected closure date.
Chronology
- A Certificate Problem Report was submitted to CFCA.
- The 24-hour preliminary response deadline was missed and the CPR was acknowledged later that day.
- CFCA opened the Bugzilla incident report for the delayed CPR response.
- CFCA said all action items were complete.
- CFCA posted a closure report and requested closure.
- The bug was resolved with resolution FIXED.
Thread Activity
- China Financial Certification Authority (CFCA) — CFCA filed a preliminary incident report saying the CPR acknowledgment exceeded the 24-hour requirement in BR Section 4.9.5.
- China Financial Certification Authority (CFCA) — CFCA said it was preparing the full report and had no other updates yet.
- China Financial Certification Authority (CFCA) — CFCA filed the full incident report with the timeline, impact, and root-cause analysis.
- China Financial Certification Authority (CFCA) — CFCA said there were no further updates.
- China Financial Certification Authority (CFCA) — CFCA said it was monitoring the incident and had no further updates yet.
- China Financial Certification Authority (CFCA) — CFCA again said it was monitoring the incident and had no further updates yet.
- China Financial Certification Authority (CFCA) — CFCA said there were still no further updates and that it would keep monitoring the incident.
- China Financial Certification Authority (CFCA) — CFCA said it was monitoring the incident and had no further updates yet.
- China Financial Certification Authority (CFCA) — CFCA said all action items were complete and listed completed preventive changes to CPR handling.
- China Financial Certification Authority (CFCA) — CFCA posted a closure report stating the incident report was complete and requesting closure.
- CCADB representative — CCADB issued a final call for comments and said the report would be closed on or about 2026-09-24.
- China Financial Certification Authority (CFCA) — Bug status changed to RESOLVED with resolution FIXED.
Participants
China Financial Certification Authority (CFCA)
CCADB representative
External References
Related Bugzilla IDs Mentioned
Similar Local Cases
CFCA: OCSP Service return unauthorized responses
CFCA: Delayed response to CPR-related email related with bug 2049179
Sectigo: Violation of TLS BR 7.1.3.2.2 in OCSP responses
DigiCert: Delayed availability of OCSP responses
SwissSign: Delayed revocation in Bug 2057448
KIR: OCSP responder does not return status for precertificate
Sectigo: Submitted CPR not replied to within 24 hours
SSL.com: Failure to respond to Certificate Problem Report within 24 hours