← China Financial Certification Authority (CFCA) cases
Bugzilla #2082334
Ca Certificate Compliance
Externally Reported Incident
Certificate Misissuance
Incident
Opened By Ca
CFCA test websites for EV roots serve OV certificates
ASSIGNED
China Financial Certification Authority (CFCA)
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
This case reports that CFCA’s CCADB-listed test pages for EV roots were serving OV certificates instead of EV certificates. A community member reported the issue, and CFCA says it verified the defect on 2026-10-13. CFCA states the affected scope is limited to two internal test-purpose certificates, with no subscriber certificates involved. The bug notes that the certificates remain in place pending replacement, so the incident was still ongoing at the time of the preliminary report. CFCA said a full incident report would follow.
Chronology
- CFCA verified that the EV-root test pages were serving OV certificates on the affected test websites.
- CFCA opened a preliminary incident report about the test websites serving OV certificates instead of EV certificates.
Thread Activity
- China Financial Certification Authority (CFCA) — CFCA reported a third-party-disclosed incident involving two internal test-purpose certificates and said a full incident report would follow.
Participants
China Financial Certification Authority (CFCA)
External References
Similar Local Cases
NETLOCK: Certificate Problem Report [CRL BR S7.2.2]
Asseco DS / Certum: Incorrect ECDSA-SHA384 AlgorithmIdentifier Encoding in CRLs
Telekom Security: Typographical error in CPS section 7.1.6
Actalis: Non-compliant OCSP responses and OCSP responder certificate
KIR S.A.: Invalid organizationName
ACCV: EKU Inconsistency in ACCV RSA1 TLS CA Certificates Identified During Chrome Root Inclusion Review
DigiCert: EVG CA profile compliance
D-Trust: EV Subordinate CA missing required cabfOrganizationIdentifier extension