← AC Camerfirma, S.A. cases
Bugzilla #1350615
Certificate Problem Report
Camerfirma: Startcom are issuing by proxy using Camerfirma
RESOLVED
AC Camerfirma, S.A.
AI Summary
This case involves concerns regarding Startcom's issuance of certificates through Camerfirma, a CA not under sanctions. A customer reported that Startcom was using Camerfirma to issue certificates while they were untrusted, raising questions about compliance with Mozilla policies. The investigation revealed that Startcom had a contractual relationship with Camerfirma, where Startcom performed validations and Camerfirma issued certificates. The situation has since been addressed, with changes made to ensure compliance.
Chronology
- Initial report filed regarding Startcom's practices.
- Clarification provided by Startcom regarding their relationship with Camerfirma.
Participants
Samuel Pinder
Kathleen Wilson
Gervase Markham
Inigo
External References
Similar Local Cases
Camerfirma: Startcom are issuing by proxy using Camerfirma
GlobalSign: Incapsula issued a certificate for non-existing domain (testslsslfeb20.me)
Firmaprofesional: Non-audited, non-technically-constrained intermediate certificates
Camerfirma: certs with duplicate SANs and without localityName or stateOrProvinceName
EV SSL certificate (and OCSP response) for www.camerfirma.com fails to meet EV Guidelines
LuxTrust: issuing 1024 bit certificates
Investigate *.google.com certificate issued by DigiNotar and used by Iran government?
GoDaddy: New GoDaddy incorrect issuance bug appears to be regression of 2010 issue