Firmaprofesional delayed revocation of SHA-1-signed subordinate CA certificate AC Firmaprofesional - CA1
This case concerns Firmaprofesional’s failure to revoke the subordinate CA certificate AC Firmaprofesional - CA1 by the 2026-09-15 deadline for SHA-1-signed subordinate CA certificates. The issue was identified after the Chrome Root Program filed a Certificate Problem Report on 2026-09-15 noting that CA1 was still unexpired and unrevoked. Firmaprofesional acknowledged the revocation requirement and reported that it was investigating the certificate’s revocation status and coordinating dependent revocations. The thread shows that the CA first worked through revocation of five time-stamping certificates that depended on CA1 before revoking CA1 itself. As of the latest update in the thread, the five dependent time-stamping certificates had been revoked, but AC Firmaprofesional - CA1 had not yet been revoked. The bug remains open and the CA said it would provide the next progress update after the planned CA1 revocation.
- AC Firmaprofesional - CA1 remained unrevoked after the SHA-1 retirement deadline.
- Chrome Root Program filed a Certificate Problem Report about the unrevoked SHA-1-signed subordinate CA certificate.
- Firmaprofesional revoked the five dependent time-stamping certificates but had not yet revoked AC Firmaprofesional - CA1.
- Autoridad de Certificacion Firmaprofesional — Firmaprofesional filed a preliminary incident report saying CA1 had not been revoked by the deadline and that the incident was ongoing.
- Autoridad de Certificacion Firmaprofesional — Firmaprofesional said revocation of CA1 was still incomplete and that operational dependencies were delaying completion.
- Autoridad de Certificacion Firmaprofesional — Firmaprofesional published a full incident report stating the incident remained ongoing and CA1 was still unrevoked.
- Autoridad de Certificacion Firmaprofesional — Firmaprofesional reported that two of the five dependent time-stamping certificates had been revoked, but CA1 still had not been revoked.
- Autoridad de Certificacion Firmaprofesional — Firmaprofesional said the planned milestone had been missed and updated the action item status to Delayed.
- Autoridad de Certificacion Firmaprofesional — Firmaprofesional said the incident remained ongoing and that CA1 revocation was still not confirmed.
- Autoridad de Certificacion Firmaprofesional — Firmaprofesional reported that all five dependent time-stamping certificates had been revoked and committed to revoking CA1 on 2026-10-22.