Firmaprofesional incident report on certificateHold entries in AC Firmaprofesional - CUALIFICADOS CRL
Firmaprofesional opened this case after receiving a third-party Certificate Problem Report about `certificateHold (6)` entries in the public CRL for `AC Firmaprofesional - CUALIFICADOS`. The company investigated the CRL entries and concluded that they related to non-WebPKI electronic-signature certificates used for eIDAS services, not publicly trusted TLS server certificates. In its full incident report, Firmaprofesional said it did not consider the publication of those entries to be TLS Baseline Requirements non-compliance, but it also decided to discontinue `certificateHold (6)` for all certificate types. It notified customers on 2026-10-05 and removed the suspension option from production systems on 2026-10-19. The bug remains open pending completion and verification of the remaining action item to eliminate all `certificateHold (6)` entries from the CUALIFICADOS CRL from 2026-11-03 onward.
- A third-party CPR identified `certificateHold (6)` entries in the public CRL for AC Firmaprofesional - CUALIFICADOS.
- Firmaprofesional sent customer notification that temporary certificate suspension was being withdrawn.
- Firmaprofesional removed the ability to select or generate temporary certificate suspension from production systems.
- Autoridad de Certificacion Firmaprofesional — Firmaprofesional filed a preliminary incident report describing the CPR, the CRL evidence, and its initial interpretation of TLS BR §§ 4.9.13 and 7.2.2.
- Autoridad de Certificacion Firmaprofesional — Firmaprofesional filed the full incident report, concluded the entries were outside TLS BR scope, and committed to discontinue certificateHold for all certificate types.
- Autoridad de Certificacion Firmaprofesional — Firmaprofesional reported Action Item 1 complete after sending the customer notice and requested the next-update whiteboard be set to 2026-10-19.
- Autoridad de Certificacion Firmaprofesional — Firmaprofesional reported Action Item 2 complete after removing suspension from production systems and said Action Item 3 remains ongoing until 2026-11-03.