Below is a summary of the audit reminder email that was sent today. CA annual updates and audit statements should be provided via the CCADB, as described here: https://wiki.mozilla.org/CA:CommonCADatabase#How_To_Provide_Annual_Updates
Please note that I have not caught up from my vacation, and there are Audit Cases in the CCADB for me to review, which means that some of these CAs may have already provided their audit statements, but I have not gotten to them yet. -------- Forwarded Message -------- Subject: Summary of April 2017 Audit Reminder Emails Date: Tue, 18 Apr 2017 19:10:50 +0000 (GMT) Mozilla: Audit Reminder Root Certificates: Symantec Class 1 Public Primary Certification Authority - G4 Symantec Class 2 Public Primary Certification Authority - G4 Symantec Class 2 Public Primary Certification Authority - G6 Symantec Class 1 Public Primary Certification Authority - G6 Standard Audit: https://www.symantec.com/content/en/us/about/media/repository/1_symantec_stn_wtca_6-15-2016.pdf Audit Statement Date: 2016-05-13 CA Comments: null ____ Mozilla: Audit Reminder Root Certificates: SZAFIR ROOT CA2 Standard Audit: https://cert.webtrust.org/SealFile?seal=2018&file=pdf Audit Statement Date: 2016-03-18 BR Audit: https://cert.webtrust.org/SealFile?seal=2018&file=pdf BR Audit Statement Date: 2016-03-18 CA Comments: null ____ Mozilla: Audit Reminder Root Certificates: Autoridad de Certificacion Firmaprofesional CIF A62634068 Standard Audit: https://cert.webtrust.org/SealFile?seal=2032&file=pdf Audit Statement Date: 2016-04-11 BR Audit: https://bug521439.bmoattachments.org/attachment.cgi?id=8809981 BR Audit Statement Date: 2016-08-05 EV Audit: https://bug521439.bmoattachments.org/attachment.cgi?id=8809982 EV Audit Statement Date: 2016-08-05 CA Comments: BR and EV audits have happened, but there are action plans being presented to the auditors. Primary issues are use of UTF8 instead of PrintableString in jurisdictionOfIncorporation, and a recently repealed Spanish law that required privat ____ Mozilla: Audit Reminder Root Certificates: Buypass Class 2 Root CA Buypass Class 3 Root CA Standard Audit: http://www.buypass.no/om-buypass/etsi-102-042/_attachment/33325?_download=true&_ts=14bc532b650 Audit Statement Date: 2016-03-23 BR Audit: http://www.buypass.no/om-buypass/etsi-102-042/_attachment/33325?_download=true&_ts=14bc532b650 BR Audit Statement Date: 2016-03-23 EV Audit: http://www.buypass.no/om-buypass/etsi-102-042/_attachment/33325?_download=true&_ts=14bc532b650 EV Audit Statement Date: 2016-03-23 CA Comments: null ____ Mozilla: Audit Reminder Root Certificates: ComSign CA ComSign Secured CA Standard Audit: https://bug1269275.bmoattachments.org/attachment.cgi?id=8778667 Audit Statement Date: 2016-04-26 CA Comments: null ____ Mozilla: Audit Reminder Root Certificates: Cybertrust Global Root DigiCert Assured ID Root G2 DigiCert Assured ID Root G3 DigiCert Global Root G2 DigiCert Global Root G3 DigiCert High Assurance EV Root CA DigiCert Trusted Root G4 Standard Audit: https://cert.webtrust.org/SealFile?seal=2165&file=pdf Audit Statement Date: 2016-10-24 Standard Audit: https://cert.webtrust.org/SealFile?seal=2020&file=pdf Audit Statement Date: 2016-06-27 BR Audit: https://cert.webtrust.org/SealFile?seal=2016&file=pdf BR Audit Statement Date: 2016-03-18 BR Audit: https://cert.webtrust.org/SealFile?seal=2021&file=pdf BR Audit Statement Date: 2016-06-27 EV Audit: https://cert.webtrust.org/SealFile?seal=2166&file=pdf EV Audit Statement Date: 2016-10-24 EV Audit: https://cert.webtrust.org/SealFile?seal=2022&file=pdf EV Audit Statement Date: 2016-04-07 CA Comments: null ____ Mozilla: Audit Reminder Root Certificates: QuoVadis Root CA 1 G3 QuoVadis Root CA 2 QuoVadis Root CA 2 G3 QuoVadis Root CA 3 QuoVadis Root CA 3 G3 QuoVadis Root Certification Authority Standard Audit: https://cert.webtrust.org/SealFile?seal=2013&file=pdf Audit Statement Date: 2016-03-28 BR Audit: https://cert.webtrust.org/SealFile?seal=2011&file=pdf BR Audit Statement Date: 2016-03-28 EV Audit: https://cert.webtrust.org/SealFile?seal=2012&file=pdf EV Audit Statement Date: 2016-03-28 CA Comments: https://www.wisekey.com/investors_press-release/wisekey-sixwihn-signs-letter-of-intent-to-acquire-quovadis-consolidating-certification-authority-power-for-eidas-and-iot ____ Mozilla: Audit Reminder Root Certificates: SwissSign Gold CA - G2 SwissSign Platinum CA - G2 SwissSign Silver CA - G2 Standard Audit: https://bug343756.bmoattachments.org/attachment.cgi?id=8781268 Audit Statement Date: 2016-03-18 BR Audit: https://bug343756.bmoattachments.org/attachment.cgi?id=8781268 BR Audit Statement Date: 2016-03-18 EV Audit: https://bug343756.bmoattachments.org/attachment.cgi?id=8781268 EV Audit Statement Date: 2016-03-18 CA Comments: null ____ Mozilla: Audit Reminder Root Certificates: GeoTrust Global CA GeoTrust Global CA 2 GeoTrust Primary Certification Authority GeoTrust Primary Certification Authority - G2 GeoTrust Primary Certification Authority - G3 GeoTrust Universal CA GeoTrust Universal CA 2 Standard Audit: https://www.symantec.com/content/en/us/about/media/repository/3_symantec_geotrust_wtca_6-15-2016.pdf Audit Statement Date: 2016-05-13 BR Audit: https://www.symantec.com/content/en/us/about/media/repository/6_symantec_geotrust_wtbr_6-15-2016.pdf BR Audit Statement Date: 2016-05-13 EV Audit: https://www.symantec.com/content/en/us/about/media/repository/9_symantec_geotrust_wtev_6-15-2016.pdf EV Audit Statement Date: 2016-05-13 CA Comments: null ____ Mozilla: Audit Reminder Root Certificates: thawte Primary Root CA thawte Primary Root CA - G2 thawte Primary Root CA - G3 Standard Audit: https://www.symantec.com/content/en/us/about/media/repository/2_symantec_thawte_wtca_6-15-2016.pdf Audit Statement Date: 2016-05-13 BR Audit: https://www.symantec.com/content/en/us/about/media/repository/5_symantec_thawte_wtbr_6-15-2016.pdf BR Audit Statement Date: 2016-05-13 EV Audit: https://www.symantec.com/content/en/us/about/media/repository/8_symantec_thawte_wtev_6-15-2016.pdf EV Audit Statement Date: 2016-05-13 CA Comments: null ____ Mozilla: Audit Reminder Root Certificates: VeriSign Class 1 Public PCA - G3 VeriSign Class 2 Public PCA - G3 VeriSign Class 3 Public Primary Certification Authority - G3 VeriSign Class 3 Public Primary Certification Authority - G4 VeriSign Class 3 Public Primary Certification Authority - G5 VeriSign Universal Root Certification Authority Standard Audit: https://www.symantec.com/content/en/us/about/media/repository/1_symantec_stn_wtca_6-15-2016.pdf Audit Statement Date: 2016-05-13 BR Audit: BR Audit Statement Date: BR Audit: https://www.symantec.com/content/en/us/about/media/repository/4_symantec_stn_wtbr_6-15-2016.pdf BR Audit Statement Date: 2016-05-13 EV Audit: https://www.symantec.com/content/en/us/about/media/repository/7_symantec_stn_wtev_6-15-2016.pdf EV Audit Statement Date: 2016-05-13 CA Comments: null ____ Mozilla: Audit Reminder Root Certificates: Trustis Limited - Trustis FPS Root CA Standard Audit: https://bugzilla.mozilla.org/attachment.cgi?id=8745582 Audit Statement Date: 2016-02-03 BR Audit: https://bugzilla.mozilla.org/attachment.cgi?id=8745582 BR Audit Statement Date: 2016-02-03 CA Comments: null ____ Mozilla: Audit Reminder Root Certificates: Amazon Root CA 3 Amazon Root CA 2 Starfield Services Root Certificate Authority - G2 Amazon Root CA 1 Amazon Root CA 4 Standard Audit: https://cert.webtrust.org/SealFile?seal=1998&file=pdf Audit Statement Date: 2016-02-24 BR Audit: https://cert.webtrust.org/SealFile?seal=1999&file=pdf BR Audit Statement Date: 2016-02-24 EV Audit: https://cert.webtrust.org/SealFile?seal=2000&file=pdf EV Audit Statement Date: 2016-02-24 CA Comments: null ____ _______________________________________________ dev-security-policy mailing list [email protected] https://lists.mozilla.org/listinfo/dev-security-policy
