← Autoridad de Certificación (ANF AC) cases
Bugzilla #2081189
Ca Certificate Compliance
Incident
Self Reported Incident
Certificate Misissuance
Problem Reporting Failure
ANF AC self-reported OCSP responder certificate profile non-compliance
ASSIGNED
Autoridad de Certificación (ANF AC)
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
ANF AC reported a compliance issue involving the OCSP responder certificate "ANF Secure Server CA Responder 1590". The case began after ANF AC received a third-party Certificate Problem Report about potential non-compliance with TLS Baseline Requirements section 7.1.2.8. ANF AC then identified four profile deviations in the responder certificate, including prohibited extensions and key usage content. The company said the issue was limited to one OCSP responder certificate, did not affect subscriber certificates, and did not disrupt OCSP service. ANF AC replaced the affected certificate on 2026-10-14 and later said it updated its CPS and OCSP certificate profile documentation, with the CPS reflected in CCADB where applicable.
Chronology
- ANF AC issued the OCSP responder certificate "ANF Secure Server CA Responder 1590".
- ANF AC received a third-party Certificate Problem Report about the OCSP responder certificate profile.
- ANF AC replaced the affected OCSP responder certificate on the OCSP service.
- ANF AC said it updated its CPS and OCSP certificate profile documentation, and the CPS was updated in CCADB.
Thread Activity
- Autoridad de Certificación (ANF AC) — ANF AC filed a preliminary incident report describing the third-party CPR and the four suspected OCSP responder certificate profile deviations.
- Autoridad de Certificación (ANF AC) — ANF AC filed a full incident report with the timeline, impact, and replacement of the affected certificate.
- Autoridad de Certificación (ANF AC) — ANF AC reported completion of the action item to update the CPS and OCSP certificate profile documentation.
Participants
Autoridad de Certificación (ANF AC)
External References
Similar Local Cases
ANF AC: Test Certificates Non-Compliance
ANF AC: Incident Report - OCSP "unknown" response for CT precertificate
ANF AC: Delayed Disclosure of Updated Policy Documents in CCADB
ANF AC: Finding #2 ETSI Audit - Information security policy not updated on the website
TWCA: Non-critical basicConstraints in Delegated OCSP Responder Certificates
eMudhra emSign PKI Services: InCommon RSA IGTF Server CA 4 — certificates issued with key sizes not permitted by CPS
Telia: CRL signature algorithm property non-conformance for EC issuer key
Disig: CRL contains not allowed attributes