Firmaprofesional delayed preliminary CPR response due to incomplete mailbox monitoring coverage

Firmaprofesional reported that it failed to provide preliminary findings within 24 hours after receiving a Certificate Problem Report about OCSP signature-verification errors. The report arrived at the compliance mailbox, but the CPR monitoring workflow did not include that mailbox, so the message was not handled within the required deadline. Firmaprofesional stated that this was a self-reported recurrence of a prior BR 4.9.5 response failure previously tracked in Bug 2016066. The company later sent preliminary findings to the reporter and then completed remediation work to expand CPR intake coverage, connect registered intake routes to the tracked workflow, and add recurring end-to-end testing. The bug was closed after Firmaprofesional stated that all disclosed action items were complete.

1. 2026-09-11 Firmaprofesional received a Certificate Problem Report at its compliance mailbox about OCSP signature-verification errors.
2. 2026-09-12 The 24-hour deadline for preliminary findings elapsed without a response to the reporter.
3. 2026-09-14 Firmaprofesional identified the missed deadline and sent preliminary findings to the reporter.
4. 2026-10-09 Firmaprofesional completed deployment of controls to register CPR intake routes and connect them to the tracked workflow.
5. 2026-10-16 Firmaprofesional completed the first recurring independent end-to-end CPR intake and response test cycle.
6. 2026-10-19 Firmaprofesional filed a closure summary stating that all action items were complete.

1. 2026-09-14 Autoridad de Certificacion Firmaprofesional — Firmaprofesional opened a preliminary incident report describing the missed 24-hour CPR response deadline and identifying incomplete mailbox coverage as the cause.
2. 2026-09-21 Autoridad de Certificacion Firmaprofesional — Firmaprofesional confirmed that the compliance mailbox was not included in the monitored workflow and said the full incident report would follow.
3. 2026-09-28 Autoridad de Certificacion Firmaprofesional — Firmaprofesional filed the full incident report, including the timeline, scope, and recurrence of the BR 4.9.5 response failure.
4. 2026-10-09 Autoridad de Certificacion Firmaprofesional — Firmaprofesional reported completion of action items to register CPR intake routes and connect them to the tracked workflow.
5. 2026-10-16 Autoridad de Certificacion Firmaprofesional — Firmaprofesional reported completion of the recurring independent end-to-end CPR testing action item.
6. 2026-10-19 Autoridad de Certificacion Firmaprofesional — Firmaprofesional requested closure after stating that all disclosed action items were complete.