View source for CA/PROCERT Issues

This page lists all alleged issues involving the CA "PROCERT". It may be further updated by Mozilla as more information becomes available. Please do not edit this page yourself; if you have proposed changes, email Gerv. Information here is correct to the best of Mozilla's knowledge and belief.

PROCERT has a [https://crt.sh/?id=156583 single certificate] in the Mozilla Root Program. The CN of the root is "PSCProcert", and it expires on December 25, 2020. It can be found in the Firefox certificate viewer categorized under "Sistema Nacional de Certificacion Electronica", because it is a subCA of a larger CA. [https://bugzilla.mozilla.org/show_bug.cgi?id=1302431 This larger CA] is categorized as a "SuperCA" and so its subCAs need to apply for inclusion individually, as PROCERT [https://bugzilla.mozilla.org/show_bug.cgi?id=593805 did] in 2010, with the cert added in 2013. 

When considering the list of issues below, it is notable that only around 119 unrevoked certificates issued by PROCERT are known to CT, of which only around 36 are unexpired. These numbers are not verifiable using the crt.sh interface, which does not allow exclusion of revoked certificates. [https://crt.sh/?Identity=%25&iCAID=750 Here is the full list] of 493 certs known to crt.sh. PROCERT seems to have a practice of revoking certs very often, either soon after they are issued or around the time they expire. The number and variety of failures needs to be considered in the light of this small corpus.