Audit Reminder Email Summary

4810 views
Skip to first unread message

Kathleen Wilson

unread,
Nov 15, 2016, 3:08:52 PM11/15/16
to mozilla-dev-s...@lists.mozilla.org
Here's a summary of the audit reminder emails that were sent today.

The following is now automatically generated when the audit reminder emails get sent.


-------- Forwarded Message --------
Subject: Summary of November 2016 Audit Reminder Emails
Date: Tue, 15 Nov 2016 20:00:42 +0000 (GMT)

Mozilla: Audit Reminder
Root Certificates:
ISRG Root X1
Standard Audit: https://cert.webtrust.org/SealFile?seal=1987&file=pdf
Audit Statement Date: 2015-12-15
BR Audit: https://cert.webtrust.org/SealFile?seal=1988&file=pdf
BR Audit Statement Date: 2015-12-15
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
EE Certification Centre Root CA
Standard Audit: http://www.sk.ee/en/repository/audit/
Audit Statement Date: 2015-10-30
BR Audit: https://www.sk.ee/upload/files/53_Audit%20Attestation%202015.pdf
BR Audit Statement Date: 2015-10-30
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
CA Disig Root R1
CA Disig Root R2
Standard Audit: http://www.disig.eu/_pdf/Audit2015_report.pdf
Audit Statement Date: 2015-10-28
BR Audit: http://www.disig.eu/_pdf/Audit2015_report.pdf
BR Audit Statement Date: 2015-10-28
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
ACEDICOM Root
Standard Audit: https://cert.webtrust.org/SealFile?seal=1958&file=pdf
Audit Statement Date: 2015-11-03
BR Audit: https://cert.webtrust.org/SealFile?seal=1958&file=pdf
BR Audit Statement Date: 2015-11-03
CA Comments: null

____

Mozilla: Overdue Audit Statements
Root Certificates:
Root CA Generalitat Valenciana
Standard Audit: https://cert.webtrust.org/SealFile?seal=1908&file=pdf
Audit Statement Date: 2015-07-17
BR Audit: https://cert.webtrust.org/SealFile?seal=1908&file=pdf
BR Audit Statement Date: 2015-07-17
CA Comments: Per CA request, Root CA Generalitat Valenciana will be removed via https://bugzilla.mozilla.org/show_bug.cgi?id=1272158

____

Mozilla: Overdue Audit Statements
Root Certificates:
Class 2 Primary CA
Standard Audit: http://www.lsti-certification.fr/images/liste_entreprise/Liste%20PSCe.pdf
Audit Statement Date: 2015-04-09
BR Audit: https://bug1025095.bugzilla.mozilla.org/attachment.cgi?id=8590352
BR Audit Statement Date: 2015-04-09
EV Audit: http://www.lsti-certification.fr/images/liste_entreprise/Liste%20PSCe.pdf
EV Audit Statement Date: 2015-04-09
CA Comments: https://bugzilla.mozilla.org/show_bug.cgi?id=1297034 Did not find reference to "Class 2 Primary CA" in the 2016 audit statements. Update: Audit of Class 2 Primary CA completed mid-October. Waiting for auditor to write attestation letter.

____

Mozilla: Audit Reminder
Root Certificates:
Secure Global CA
SecureTrust CA
XRamp Global Certification Authority
Standard Audit: https://cert.webtrust.org/SealFile?seal=1951&file=pdf
Audit Statement Date: 2015-11-16
BR Audit: https://cert.webtrust.org/SealFile?seal=1954&file=pdf
BR Audit Statement Date: 2015-11-16
EV Audit: https://cert.webtrust.org/SealFile?seal=1952&file=pdf
EV Audit Statement Date: 2015-11-16
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
CFCA EV ROOT
Standard Audit: https://cert.webtrust.org/SealFile?seal=1944&file=pdf
Audit Statement Date: 2015-10-16
BR Audit: https://cert.webtrust.org/SealFile?seal=1946&file=pdf
BR Audit Statement Date: 2015-10-16
EV Audit: https://cert.webtrust.org/SealFile?seal=1945&file=pdf
EV Audit Statement Date: 2015-10-16
CA Comments: null

____

Kathleen Wilson

unread,
Dec 20, 2016, 3:48:43 PM12/20/16
to mozilla-dev-s...@lists.mozilla.org
-------- Forwarded Message --------
Subject: Summary of December 2016 Audit Reminder Emails
Date: Tue, 20 Dec 2016 20:00:30 +0000 (GMT)

Mozilla: Audit Reminder
Root Certificates:
ISRG Root X1
Standard Audit: https://cert.webtrust.org/SealFile?seal=1987&file=pdf
Audit Statement Date: 2015-12-15
BR Audit: https://cert.webtrust.org/SealFile?seal=1988&file=pdf
BR Audit Statement Date: 2015-12-15
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
EE Certification Centre Root CA
Standard Audit: http://www.sk.ee/en/repository/audit/
Audit Statement Date: 2015-10-30
BR Audit: https://www.sk.ee/upload/files/53_Audit%20Attestation%202015.pdf
BR Audit Statement Date: 2015-10-30
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
Cybertrust Global Root
Standard Audit: https://cert.webtrust.org/SealFile?seal=1971&file=pdf
Audit Statement Date: 2016-01-06
BR Audit: https://cert.webtrust.org/SealFile?seal=2016&file=pdf
BR Audit Statement Date: 2016-03-18
EV Audit: https://bugzilla.mozilla.org/attachment.cgi?id=8778393 and https://cert.webtrust.org/SealFile?seal=1969&file=pdf
EV Audit Statement Date: 2016-01-06
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
ACEDICOM Root
Standard Audit: https://cert.webtrust.org/SealFile?seal=1958&file=pdf
Audit Statement Date: 2015-11-03
BR Audit: https://cert.webtrust.org/SealFile?seal=1958&file=pdf
BR Audit Statement Date: 2015-11-03
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
TÜB?TAK UEKAE Kök Sertifika Hizmet Sa?lay?c?s? - Sürüm 3
Standard Audit: https://bugzilla.mozilla.org/attachment.cgi?id=8738994
Audit Statement Date: 2015-12-28
BR Audit: https://bugzilla.mozilla.org/attachment.cgi?id=8738994
BR Audit Statement Date: 2015-12-28
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
Microsec e-Szigno Root CA
Microsec e-Szigno Root CA 2009
Standard Audit: http://static.e-szigno.hu/docs/NMHH_supervision_2015.pdf
Audit Statement Date: 2016-01-12
BR Audit: http://static.e-szigno.hu/docs/NMHH_supervision_2015.pdf
BR Audit Statement Date: 2016-01-12
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H5
TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? 2007
Standard Audit: https://www.tuvit.de/data/content_data/tuevit_en/6749UE_s.pdf
Audit Statement Date: 2015-12-16
Standard Audit: https://www.tuvit.de/data/content_data/tuevit_en/6745UE_s.pdf
Audit Statement Date: 2015-12-16
BR Audit: https://www.tuvit.de/data/content_data/tuevit_en/6749UE_s.pdf
BR Audit Statement Date: 2015-12-16
BR Audit: https://www.tuvit.de/data/content_data/tuevit_en/6745UE_s.pdf
BR Audit Statement Date: 2015-12-16
EV Audit: https://www.tuvit.de/data/content_data/tuevit_en/6745UE_s.pdf
EV Audit Statement Date: 2015-12-16
EV Audit:
EV Audit Statement Date:
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
WellsSecure Public Root Certificate Authority
Standard Audit: https://bugzilla.mozilla.org/attachment.cgi?id=8710093
Audit Statement Date: 2015-12-21
BR Audit: https://bugzilla.mozilla.org/attachment.cgi?id=8710092
BR Audit Statement Date: 2015-12-21

Kathleen Wilson

unread,
Jan 17, 2017, 3:17:27 PM1/17/17
to mozilla-dev-s...@lists.mozilla.org
-------- Forwarded Message --------
Subject: Summary of January 2017 Audit Reminder Emails
Date: Tue, 17 Jan 2017 20:02:07 +0000 (GMT)

Mozilla: Audit Reminder
Root Certificates:
ISRG Root X1
Standard Audit: https://cert.webtrust.org/SealFile?seal=1987&file=pdf
Audit Statement Date: 2015-12-15
BR Audit: https://cert.webtrust.org/SealFile?seal=1988&file=pdf
BR Audit Statement Date: 2015-12-15
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
Certigna
Standard Audit: https://bugzilla.mozilla.org/attachment.cgi?id=8722744
Audit Statement Date: 2016-02-15
BR Audit: http://www.lsti-certification.fr/images/liste_entreprise/Liste%20PSCe.pdf
BR Audit Statement Date: 2016-02-15
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
certSIGN ROOT CA
Standard Audit: https://www.certsign.ro/certsign_en/files/certSIGN_Webtrust_CA.pdf
Audit Statement Date: 2016-02-08
BR Audit: https://www.certsign.ro/certsign_en/files/certSIGN_Webtrust_CA.pdf
BR Audit Statement Date: 2016-02-08
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
D-TRUST Root Class 3 CA 2 2009
D-TRUST Root Class 3 CA 2 EV 2009
Standard Audit: https://www.tuvit.de/en/zertifizierungssuchergebnisseite-1852.htm?group=SystemsInfrastructures&type=ETSITS&search-term=D-TRUST
Audit Statement Date: 2016-01-20
BR Audit: https://www.tuvit.de/data/content_data/tuevit_en/6765UE_s.pdf
BR Audit Statement Date: 2016-01-20
EV Audit: https://www.tuvit.de/data/content_data/tuevit_en/6766UE_s.pdf
EV Audit Statement Date: 2016-01-20
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
ACEDICOM Root
Standard Audit: https://cert.webtrust.org/SealFile?seal=1958&file=pdf
Audit Statement Date: 2015-11-03
BR Audit: https://cert.webtrust.org/SealFile?seal=1958&file=pdf
BR Audit Statement Date: 2015-11-03
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
Microsec e-Szigno Root CA
Microsec e-Szigno Root CA 2009
Standard Audit: http://static.e-szigno.hu/docs/NMHH_supervision_2015.pdf
Audit Statement Date: 2016-01-12
BR Audit: http://static.e-szigno.hu/docs/NMHH_supervision_2015.pdf
BR Audit Statement Date: 2016-01-12
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
TWCA Global Root CA
TWCA Root Certification Authority
Standard Audit: https://cert.webtrust.org/SealFile?seal=1981&file=pdf
Audit Statement Date: 2016-02-15
BR Audit: https://cert.webtrust.org/SealFile?seal=1985&file=pdf
BR Audit Statement Date: 2016-02-15
EV Audit: https://cert.webtrust.org/SealFile?seal=1986&file=pdf
EV Audit Statement Date: 2016-02-15
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
Trustis Limited - Trustis FPS Root CA
Standard Audit: https://bugzilla.mozilla.org/attachment.cgi?id=8745582
Audit Statement Date: 2016-02-03
BR Audit: https://bugzilla.mozilla.org/attachment.cgi?id=8745582
BR Audit Statement Date: 2016-02-03
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H5
TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? 2007
Standard Audit: https://www.tuvit.de/data/content_data/tuevit_en/6749UE_s.pdf
Audit Statement Date: 2015-12-16
Standard Audit: https://www.tuvit.de/data/content_data/tuevit_en/6745UE_s.pdf
Audit Statement Date: 2015-12-16
BR Audit: https://www.tuvit.de/data/content_data/tuevit_en/6749UE_s.pdf
BR Audit Statement Date: 2015-12-16
EV Audit: https://www.tuvit.de/data/content_data/tuevit_en/6745UE_s.pdf
EV Audit Statement Date: 2015-12-16
CA Comments: null

____

Kathleen Wilson

unread,
Feb 23, 2017, 9:14:28 AM2/23/17
to mozilla-dev-s...@lists.mozilla.org
-------- Forwarded Message --------
Subject: Summary of February 2017 Audit Reminder Emails
Date: Tue, 21 Feb 2017 20:00:51 +0000 (GMT)

Mozilla: Audit Reminder
Root Certificates:
ISRG Root X1
Standard Audit: https://cert.webtrust.org/SealFile?seal=1987&file=pdf
Audit Statement Date: 2015-12-15
BR Audit: https://cert.webtrust.org/SealFile?seal=1988&file=pdf
BR Audit Statement Date: 2015-12-15
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
Staat der Nederlanden EV Root CA
Staat der Nederlanden Root CA - G3
Staat der Nederlanden Root CA - G2
Standard Audit: https://cert.webtrust.org/SealFile?seal=2010&file=pdf
Audit Statement Date: 2016-03-02
BR Audit: https://cert.webtrust.org/SealFile?seal=2010&file=pdf
BR Audit Statement Date: 2016-03-02
EV Audit: https://cert.webtrust.org/SealFile?seal=2010&file=pdf
EV Audit Statement Date: 2016-03-02
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
SZAFIR ROOT CA2
Standard Audit: https://cert.webtrust.org/SealFile?seal=2018&file=pdf
Audit Statement Date: 2016-03-18
BR Audit: https://cert.webtrust.org/SealFile?seal=2018&file=pdf
BR Audit Statement Date: 2016-03-18
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
certSIGN ROOT CA
Standard Audit: https://www.certsign.ro/certsign_en/files/certSIGN_Webtrust_CA.pdf
Audit Statement Date: 2016-02-08
BR Audit: https://www.certsign.ro/certsign_en/files/certSIGN_Webtrust_CA.pdf
BR Audit Statement Date: 2016-02-08
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
Cybertrust Global Root
Standard Audit: https://cert.webtrust.org/SealFile?seal=2165&file=pdf
Audit Statement Date: 2016-10-24
BR Audit: https://cert.webtrust.org/SealFile?seal=2016&file=pdf
BR Audit Statement Date: 2016-03-18
EV Audit: https://cert.webtrust.org/SealFile?seal=2166&file=pdf
EV Audit Statement Date: 2016-10-24
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
D-TRUST Root Class 3 CA 2 2009
D-TRUST Root Class 3 CA 2 EV 2009
Standard Audit: https://www.tuvit.de/data/content_data/tuevit_en/6765UE_s.pdf
Audit Statement Date: 2016-01-20
Standard Audit: https://www.tuvit.de/data/content_data/tuevit_en/6766UE_s.pdf
Audit Statement Date: 2016-01-20
BR Audit: https://www.tuvit.de/data/content_data/tuevit_en/6765UE_s.pdf
BR Audit Statement Date: 2016-01-20
BR Audit: https://www.tuvit.de/data/content_data/tuevit_en/6766UE_s.pdf
BR Audit Statement Date: 2016-01-20
EV Audit: https://www.tuvit.de/data/content_data/tuevit_en/6766UE_s.pdf
EV Audit Statement Date: 2016-01-20
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
ACEDICOM Root
Standard Audit: https://cert.webtrust.org/SealFile?seal=1958&file=pdf
Audit Statement Date: 2015-11-03
BR Audit: https://cert.webtrust.org/SealFile?seal=1958&file=pdf
BR Audit Statement Date: 2015-11-03
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
Hongkong Post Root CA 1
Standard Audit: https://bugzilla.mozilla.org/attachment.cgi?id=8732899
Audit Statement Date: 2016-02-26
BR Audit: https://bugzilla.mozilla.org/attachment.cgi?id=8746166
BR Audit Statement Date: 2016-03-31
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
StartCom Certification Authority
StartCom Certification Authority
StartCom Certification Authority G2
Standard Audit: https://www.startssl.com/ey-webtrust.pdf
Audit Statement Date: 2016-03-18
BR Audit: https://www.startssl.com/ey-webtrust-br.pdf
BR Audit Statement Date: 2016-03-18
EV Audit: https://www.startssl.com/ey-webtrust-ev.pdf
EV Audit Statement Date: 2016-03-18
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
SwissSign Gold CA - G2
SwissSign Platinum CA - G2
SwissSign Silver CA - G2
Standard Audit: https://bug343756.bmoattachments.org/attachment.cgi?id=8781268
Audit Statement Date: 2016-03-18
BR Audit: https://bug343756.bmoattachments.org/attachment.cgi?id=8781268
BR Audit Statement Date: 2016-03-18
EV Audit: https://bug343756.bmoattachments.org/attachment.cgi?id=8781268
EV Audit Statement Date: 2016-03-18
CA WoSign ECC Root
Certification Authority of WoSign G2
CA ?????
Certification Authority of WoSign
Standard Audit: https://cert.webtrust.org/SealFile?seal=2014&file=pdf
Audit Statement Date: 2016-02-29
BR Audit: https://cert.webtrust.org/SealFile?seal=2019&file=pdf
BR Audit Statement Date: 2016-03-31
EV Audit: https://cert.webtrust.org/SealFile?seal=2023&file=pdf
EV Audit Statement Date: 2016-02-29
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
Amazon Root CA 3
Amazon Root CA 2
Starfield Services Root Certificate Authority - G2
Amazon Root CA 1
Amazon Root CA 4
Standard Audit: https://cert.webtrust.org/SealFile?seal=1998&file=pdf
Audit Statement Date: 2016-02-24
BR Audit: https://cert.webtrust.org/SealFile?seal=1999&file=pdf
BR Audit Statement Date: 2016-02-24
EV Audit: https://cert.webtrust.org/SealFile?seal=2000&file=pdf
EV Audit Statement Date: 2016-02-24
CA Comments: null

____

Kathleen Wilson

unread,
Mar 21, 2017, 5:17:58 PM3/21/17
to mozilla-dev-s...@lists.mozilla.org
Here's a summary of the audit reminder email that was sent today.

Note that the email now tells CAs to provide their annual updates via the Common CA Database, as follows.

"Please provide your annual updates via the Common CA Database (CCADB), as described here:
https://wiki.mozilla.org/CA:CommonCADatabase#Updating_Audit_Information
"

Also note that for root certificates with the Websites trust bit enabled, the annual updates must include:
1) Current audit statements
2) Update CP/CPS documents*
3) Test websites (valid, revoked, expired)**

* Section 2 of the BRs: The CA SHALL develop, implement, enforce, and *annually update* a Certificate Policy and/or Certification Practice Statement that describes in detail how the CA implements the latest version of these Requirements.

** Section 2.2 of the BRs: The CA SHALL host test Web pages that allow Application Software Suppliers to test their software with Subscriber Certificates that chain up to each publicly trusted Root Certificate. At a minimum, the *CA SHALL host separate Web pages using Subscriber Certificates that are (i) valid, (ii) revoked, and (iii) expired.*


-------- Forwarded Message --------
Subject: Summary of March 2017 Audit Reminder Emails
Date: Tue, 21 Mar 2017 19:03:58 +0000 (GMT)
From: Mozilla CA Program Manager


Mozilla: Audit Reminder
Root Certificates:
SZAFIR ROOT CA2
Standard Audit: https://cert.webtrust.org/SealFile?seal=2018&file=pdf
Audit Statement Date: 2016-03-18
BR Audit: https://cert.webtrust.org/SealFile?seal=2018&file=pdf
BR Audit Statement Date: 2016-03-18
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
Autoridad de Certificacion Firmaprofesional CIF A62634068
Standard Audit: https://cert.webtrust.org/SealFile?seal=2032&file=pdf
Audit Statement Date: 2016-04-11
BR Audit: https://bug521439.bmoattachments.org/attachment.cgi?id=8809981
BR Audit Statement Date: 2016-08-05
EV Audit: https://bug521439.bmoattachments.org/attachment.cgi?id=8809982
EV Audit Statement Date: 2016-08-05
CA Comments: BR and EV audits have happened, but there are action plans being presented to the auditors. Primary issues are use of UTF8 instead of PrintableString in jurisdictionOfIncorporation, and a recently repealed Spanish law that required privat

____

Mozilla: Audit Reminder
Root Certificates:
Buypass Class 2 Root CA
Buypass Class 3 Root CA
Standard Audit: http://www.buypass.no/om-buypass/etsi-102-042/_attachment/33325?_download=true&_ts=14bc532b650
Audit Statement Date: 2016-03-23
BR Audit: http://www.buypass.no/om-buypass/etsi-102-042/_attachment/33325?_download=true&_ts=14bc532b650
BR Audit Statement Date: 2016-03-23
EV Audit: http://www.buypass.no/om-buypass/etsi-102-042/_attachment/33325?_download=true&_ts=14bc532b650
EV Audit Statement Date: 2016-03-23
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
Cybertrust Global Root
DigiCert Assured ID Root G2
DigiCert Assured ID Root G3
DigiCert Global Root G2
DigiCert Global Root G3
DigiCert High Assurance EV Root CA
DigiCert Trusted Root G4
Standard Audit: https://cert.webtrust.org/SealFile?seal=2165&file=pdf
Audit Statement Date: 2016-10-24
Standard Audit: https://cert.webtrust.org/SealFile?seal=2020&file=pdf
Audit Statement Date: 2016-06-27
BR Audit: https://cert.webtrust.org/SealFile?seal=2016&file=pdf
BR Audit Statement Date: 2016-03-18
BR Audit: https://cert.webtrust.org/SealFile?seal=2021&file=pdf
BR Audit Statement Date: 2016-06-27
EV Audit: https://cert.webtrust.org/SealFile?seal=2166&file=pdf
EV Audit Statement Date: 2016-10-24
EV Audit: https://cert.webtrust.org/SealFile?seal=2022&file=pdf
EV Audit Statement Date: 2016-04-07
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
Hongkong Post Root CA 1
Standard Audit: https://bugzilla.mozilla.org/attachment.cgi?id=8732899
Audit Statement Date: 2016-02-26
BR Audit: https://bugzilla.mozilla.org/attachment.cgi?id=8746166
BR Audit Statement Date: 2016-03-31
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
QuoVadis Root CA 1 G3
QuoVadis Root CA 2
QuoVadis Root CA 2 G3
QuoVadis Root CA 3
QuoVadis Root CA 3 G3
QuoVadis Root Certification Authority
Standard Audit: https://cert.webtrust.org/SealFile?seal=2013&file=pdf
Audit Statement Date: 2016-03-28
BR Audit: https://cert.webtrust.org/SealFile?seal=2011&file=pdf
BR Audit Statement Date: 2016-03-28
EV Audit: https://cert.webtrust.org/SealFile?seal=2012&file=pdf
EV Audit Statement Date: 2016-03-28
CA Comments: https://www.wisekey.com/investors_press-release/wisekey-sixwihn-signs-letter-of-intent-to-acquire-quovadis-consolidating-certification-authority-power-for-eidas-and-iot

____

Mozilla: Audit Reminder
Root Certificates:
SwissSign Gold CA - G2
SwissSign Platinum CA - G2
SwissSign Silver CA - G2
Standard Audit: https://bug343756.bmoattachments.org/attachment.cgi?id=8781268
Audit Statement Date: 2016-03-18
BR Audit: https://bug343756.bmoattachments.org/attachment.cgi?id=8781268
BR Audit Statement Date: 2016-03-18
EV Audit: https://bug343756.bmoattachments.org/attachment.cgi?id=8781268
EV Audit Statement Date: 2016-03-18
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
Trustis Limited - Trustis FPS Root CA
Standard Audit: https://bugzilla.mozilla.org/attachment.cgi?id=8745582
Audit Statement Date: 2016-02-03
BR Audit: https://bugzilla.mozilla.org/attachment.cgi?id=8745582
BR Audit Statement Date: 2016-02-03
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:

Kathleen Wilson

unread,
Apr 18, 2017, 3:22:27 PM4/18/17
to mozilla-dev-s...@lists.mozilla.org
Below is a summary of the audit reminder email that was sent today.

CA annual updates and audit statements should be provided via the CCADB, as described here:
https://wiki.mozilla.org/CA:CommonCADatabase#How_To_Provide_Annual_Updates

Please note that I have not caught up from my vacation, and there are Audit Cases in the CCADB for me to review, which means that some of these CAs may have already provided their audit statements, but I have not gotten to them yet.


-------- Forwarded Message --------
Subject: Summary of April 2017 Audit Reminder Emails
Date: Tue, 18 Apr 2017 19:10:50 +0000 (GMT)

Mozilla: Audit Reminder
Root Certificates:
Symantec Class 1 Public Primary Certification Authority - G4
Symantec Class 2 Public Primary Certification Authority - G4
Symantec Class 2 Public Primary Certification Authority - G6
Symantec Class 1 Public Primary Certification Authority - G6
Standard Audit: https://www.symantec.com/content/en/us/about/media/repository/1_symantec_stn_wtca_6-15-2016.pdf
Audit Statement Date: 2016-05-13
ComSign CA
ComSign Secured CA
Standard Audit: https://bug1269275.bmoattachments.org/attachment.cgi?id=8778667
Audit Statement Date: 2016-04-26
GeoTrust Global CA
GeoTrust Global CA 2
GeoTrust Primary Certification Authority
GeoTrust Primary Certification Authority - G2
GeoTrust Primary Certification Authority - G3
GeoTrust Universal CA
GeoTrust Universal CA 2
Standard Audit: https://www.symantec.com/content/en/us/about/media/repository/3_symantec_geotrust_wtca_6-15-2016.pdf
Audit Statement Date: 2016-05-13
BR Audit: https://www.symantec.com/content/en/us/about/media/repository/6_symantec_geotrust_wtbr_6-15-2016.pdf
BR Audit Statement Date: 2016-05-13
EV Audit: https://www.symantec.com/content/en/us/about/media/repository/9_symantec_geotrust_wtev_6-15-2016.pdf
EV Audit Statement Date: 2016-05-13
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
thawte Primary Root CA
thawte Primary Root CA - G2
thawte Primary Root CA - G3
Standard Audit: https://www.symantec.com/content/en/us/about/media/repository/2_symantec_thawte_wtca_6-15-2016.pdf
Audit Statement Date: 2016-05-13
BR Audit: https://www.symantec.com/content/en/us/about/media/repository/5_symantec_thawte_wtbr_6-15-2016.pdf
BR Audit Statement Date: 2016-05-13
EV Audit: https://www.symantec.com/content/en/us/about/media/repository/8_symantec_thawte_wtev_6-15-2016.pdf
EV Audit Statement Date: 2016-05-13
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
VeriSign Class 1 Public PCA - G3
VeriSign Class 2 Public PCA - G3
VeriSign Class 3 Public Primary Certification Authority - G3
VeriSign Class 3 Public Primary Certification Authority - G4
VeriSign Class 3 Public Primary Certification Authority - G5
VeriSign Universal Root Certification Authority
Standard Audit: https://www.symantec.com/content/en/us/about/media/repository/1_symantec_stn_wtca_6-15-2016.pdf
Audit Statement Date: 2016-05-13
BR Audit:
BR Audit Statement Date:
BR Audit: https://www.symantec.com/content/en/us/about/media/repository/4_symantec_stn_wtbr_6-15-2016.pdf
BR Audit Statement Date: 2016-05-13
EV Audit: https://www.symantec.com/content/en/us/about/media/repository/7_symantec_stn_wtev_6-15-2016.pdf
EV Audit Statement Date: 2016-05-13

Kathleen Wilson

unread,
May 16, 2017, 10:07:31 PM5/16/17
to mozilla-dev-s...@lists.mozilla.org
-------- Forwarded Message --------
Subject: Summary of May 2017 Audit Reminder Emails
Date: Tue, 16 May 2017 19:00:29 +0000 (GMT)

Mozilla: Audit Reminder
Root Certificates:
Autoridad de Certificacion Firmaprofesional CIF A62634068
Standard Audit: https://cert.webtrust.org/SealFile?seal=2032&file=pdf
Audit Statement Date: 2016-04-11
BR Audit: https://bug521439.bmoattachments.org/attachment.cgi?id=8809981
BR Audit Statement Date: 2016-08-05
EV Audit: https://bug521439.bmoattachments.org/attachment.cgi?id=8809982
EV Audit Statement Date: 2016-08-05
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
COMODO RSA Certification Authority
USERTrust ECC Certification Authority
AAA Certificate Services
AddTrust Class 1 CA Root
AddTrust External CA Root
AddTrust Public CA Root
AddTrust Qualified CA Root
COMODO Certification Authority
COMODO ECC Certification Authority
Secure Certificate Services
Trusted Certificate Services
UTN-USERFirst-Client Authentication and Email
UTN-USERFirst-Hardware
UTN-USERFirst-Object
USERTrust RSA Certification Authority
Standard Audit: https://cert.webtrust.org/SealFile?seal=2058&file=pdf
Audit Statement Date: 2016-06-03
BR Audit: https://cert.webtrust.org/SealFile?seal=2060&file=pdf
BR Audit Statement Date: 2016-06-03
BR Audit:
BR Audit Statement Date:
EV Audit: https://cert.webtrust.org/SealFile?seal=2059&file=pdf
EV Audit Statement Date: 2016-06-03
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
ComSign CA
ComSign Secured CA
Standard Audit: https://bug1269275.bmoattachments.org/attachment.cgi?id=8778667
Audit Statement Date: 2016-04-26
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
EC-ACC
Standard Audit: https://cert.webtrust.org/SealFile?seal=2043&file=pdf
Audit Statement Date: 2016-05-30
BR Audit: https://bugzilla.mozilla.org/attachment.cgi?id=8815404
BR Audit Statement Date: 2016-05-30
CA Comments: Per CA: ETSI-EIDAS audits to be released by the 1st of June 2017.

____

Mozilla: Audit Reminder
Root Certificates:
S-TRUST Universal Root CA
TC TrustCenter Class 3 CA II
Standard Audit: https://www.tuvit.de/fileadmin/Content/TUV_IT/zertifikate/en/6778UE_s.pdf
Audit Statement Date: 2016-05-31
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
Entrust Root Certification Authority - EC1
Entrust Root Certification Authority - G2
Entrust Root Certification Authority
Entrust.net Certification Authority (2048)
Standard Audit: https://cert.webtrust.org/SealFile?seal=328&file=pdf
Audit Statement Date: 2016-05-18
BR Audit: https://www.entrust.com/wp-content/uploads/2016/06/2104-01-WebTrust-for-CA-SSL-Baseline-with-Network-Security-Report-002.pdf
BR Audit Statement Date: 2016-05-18
EV Audit: https://cert.webtrust.org/SealFile?seal=328&file=pdf
EV Audit Statement Date: 2016-05-18
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
GlobalSign ECC Root CA - R5
GlobalSign Root CA - R3
GlobalSign Root CA
GlobalSign Extended Validation CA - SHA256 - G2 - intermediate cert being treated as root during transition
Standard Audit: https://cert.webtrust.org/SealFile?seal=2056&file=pdf
Audit Statement Date: 2016-06-10
BR Audit: https://cert.webtrust.org/SealFile?seal=2054&file=pdf
BR Audit Statement Date: 2016-06-10
EV Audit: https://cert.webtrust.org/SealFile?seal=2055&file=pdf
EV Audit Statement Date: 2016-06-10
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
GeoTrust Global CA 2
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
Trustis Limited - Trustis FPS Root CA
Standard Audit: https://bugzilla.mozilla.org/attachment.cgi?id=8745582
Audit Statement Date: 2016-02-03
BR Audit: https://bugzilla.mozilla.org/attachment.cgi?id=8745582
BR Audit Statement Date: 2016-02-03
CA Comments: 2017 audit submitted via CCADB Audit Case is under review

____

Mozilla: Audit Reminder
Root Certificates:
Certum Trusted Network CA 2
Certum CA
Certum Trusted Network CA
Standard Audit: https://cert.webtrust.org/SealFile?seal=2064&file=pdf
Audit Statement Date: 2016-06-10
BR Audit: https://cert.webtrust.org/SealFile?seal=2066&file=pdf
BR Audit Statement Date: 2016-06-10
EV Audit: https://cert.webtrust.org/SealFile?seal=2065&file=pdf
EV Audit Statement Date: 2016-06-10
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
FNMT-RCM - SHA256
Standard Audit: https://bugzilla.mozilla.org/attachment.cgi?id=8766584
Audit Statement Date: 2016-05-18
BR Audit: https://bugzilla.mozilla.org/attachment.cgi?id=8766583
BR Audit Statement Date: 2016-05-18
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
GlobalSign ECC Root CA - R4
GlobalSign Root CA - R2
Standard Audit: https://cert.webtrust.org/SealFile?seal=2056&file=pdf
Audit Statement Date: 2016-06-10
BR Audit: https://cert.webtrust.org/SealFile?seal=2054&file=pdf
BR Audit Statement Date: 2016-06-10
EV Audit: https://cert.webtrust.org/SealFile?seal=2055&file=pdf
EV Audit Statement Date: 2016-06-10
CA Comments: null

____

Kathleen Wilson

unread,
Jun 20, 2017, 3:20:35 PM6/20/17
to mozilla-dev-s...@lists.mozilla.org
-------- Forwarded Message --------
Subject: Summary of June 2017 Audit Reminder Emails
Date: Tue, 20 Jun 2017 19:00:06 +0000 (GMT)

Mozilla: Audit Reminder
Root Certificates:
Atos TrustedRoot 2011
Standard Audit: https://www.mydqs.com/kunden/kundendatenbank.html?aoemydqs%5BrequestId%5D=europev2-DQS-27B09FD368FD11E6BE26005056BA67F7-_v2&aoemydqs%5BdownloadKey%5D=615a9f0920a27ede37762410735c2deadd67547d&aoemydqs%5Baction%5D=downloadDocument&cHash=9653a97e7fec91c2194d
Audit Statement Date: 2016-07-11
BR Audit: https://www.mydqs.com/kunden/kundendatenbank.html?aoemydqs%5BrequestId%5D=europev2-DQS-27B09FD368FD11E6BE26005056BA67F7-_v2&aoemydqs%5BdownloadKey%5D=615a9f0920a27ede37762410735c2deadd67547d&aoemydqs%5Baction%5D=downloadDocument&cHash=9653a97e7fec91c2194d
BR Audit Statement Date: 2016-07-11
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
Autoridad de Certificacion Firmaprofesional CIF A62634068
Standard Audit: https://cert.webtrust.org/SealFile?seal=2032&file=pdf
Audit Statement Date: 2016-04-11
BR Audit: https://bug521439.bmoattachments.org/attachment.cgi?id=8809981
BR Audit Statement Date: 2016-08-05
EV Audit: https://bug521439.bmoattachments.org/attachment.cgi?id=8809982
EV Audit Statement Date: 2016-08-05
CA Comments: BR and EV audits have happened, but there are action plans being presented to the auditors. Primary issues are use of UTF8 instead of PrintableString in jurisdictionOfIncorporation, and a recently repealed Spanish law that required privat

____

Mozilla: Audit Reminder
Root Certificates:
Chambers of Commerce Root
Chambers of Commerce Root - 2008
Global Chambersign Root
Global Chambersign Root - 2008
Standard Audit: https://bug986854.bmoattachments.org/attachment.cgi?id=8775118
Audit Statement Date: 2016-06-17
BR Audit: https://bugzilla.mozilla.org/attachment.cgi?id=8800807
BR Audit Statement Date: 2016-08-05
EV Audit: https://bugzilla.mozilla.org/attachment.cgi?id=8800811
EC-ACC
Standard Audit: https://cert.webtrust.org/SealFile?seal=2043&file=pdf
Audit Statement Date: 2016-05-30
BR Audit: https://bugzilla.mozilla.org/attachment.cgi?id=8815404
BR Audit Statement Date: 2016-05-30
CA Comments: Per CA: ETSI-EIDAS audits to be released by the 1st of June 2017.

____

Mozilla: Audit Reminder
Root Certificates:
AffirmTrust Commercial
AffirmTrust Networking
AffirmTrust Premium
AffirmTrust Premium ECC
Standard Audit: https://cert.webtrust.org/SealFile?seal=2115&file=pdf
Audit Statement Date: 2016-06-30
BR Audit: https://cert.webtrust.org/SealFile?seal=2116&file=pdf
BR Audit Statement Date: 2016-06-30
EV Audit: https://cert.webtrust.org/SealFile?seal=2093&file=pdf
EV Audit Statement Date: 2016-06-30
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
GlobalSign ECC Root CA - R5
GlobalSign Root CA - R3
GlobalSign Root CA
GlobalSign Extended Validation CA - SHA256 - G2 - intermediate cert being treated as root during transition
Standard Audit: https://cert.webtrust.org/SealFile?seal=2056&file=pdf
Audit Statement Date: 2016-06-10
BR Audit: https://cert.webtrust.org/SealFile?seal=2054&file=pdf
BR Audit Statement Date: 2016-06-10
EV Audit: https://cert.webtrust.org/SealFile?seal=2055&file=pdf
EV Audit Statement Date: 2016-06-10
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
Government Root Certification Authority - Taiwan
Standard Audit: https://cert.webtrust.org/SealFile?seal=2050&file=pdf
Audit Statement Date: 2016-06-29
BR Audit: https://cert.webtrust.org/SealFile?seal=2051&file=pdf
BR Audit Statement Date: 2016-06-29
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
Hellenic Academic and Research Institutions RootCA 2011
Hellenic Academic and Research Institutions ECC RootCA 2015
Hellenic Academic and Research Institutions RootCA 2015
Standard Audit: http://www.harica.gr/documents/HARICA-ETSI_CERTIFICATE_AUTH_W_ANNEX_REV1.pdf
Audit Statement Date: 2016-07-08
BR Audit: http://www.harica.gr/documents/HARICA-ETSI_CERTIFICATE_AUTH_W_ANNEX_REV1.pdf
BR Audit Statement Date: 2016-07-08
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
Sonera Class2 CA
TeliaSonera
Standard Audit: https://cert.webtrust.org/SealFile?seal=2061&file=pdf
Audit Statement Date: 2016-06-30
BR Audit: https://bugzilla.mozilla.org/attachment.cgi?id=8774542
BR Audit Statement Date: 2016-06-30
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
Deutsche Telekom Root CA 2
T-TeleSec GlobalRoot Class 2
T-TeleSec GlobalRoot Class 3
Standard Audit: https://www.tuvit.de/fileadmin/Content/TUV_IT/zertifikate/de/6763UD_s.pdf
Audit Statement Date: 2016-06-17
Standard Audit: https://www.tuvit.de/fileadmin/Content/TUV_IT/zertifikate/de/6761UD_s.pdf
Audit Statement Date: 2016-06-17
BR Audit: https://www.tuvit.de/fileadmin/Content/TUV_IT/zertifikate/de/6763UD_s.pdf
BR Audit Statement Date: 2016-06-17
BR Audit: https://www.tuvit.de/fileadmin/Content/TUV_IT/zertifikate/de/6761UD_s.pdf
BR Audit Statement Date: 2016-06-17
EV Audit: https://www.tuvit.de/fileadmin/Content/TUV_IT/zertifikate/de/6761UD_s.pdf
EV Audit Statement Date: 2016-06-17
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
Certum Trusted Network CA 2
Certum CA
Certum Trusted Network CA
Standard Audit: https://cert.webtrust.org/SealFile?seal=2064&file=pdf
Audit Statement Date: 2016-06-10
BR Audit: https://cert.webtrust.org/SealFile?seal=2066&file=pdf
BR Audit Statement Date: 2016-06-10
EV Audit: https://cert.webtrust.org/SealFile?seal=2065&file=pdf
EV Audit Statement Date: 2016-06-10
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
OISTE WISeKey Global Root GB CA
OISTE WISeKey Global Root GA CA
Standard Audit: https://cert.webtrust.org/SealFile?seal=2071&file=pdf
Audit Statement Date: 2016-07-04
BR Audit: https://cert.webtrust.org/SealFile?seal=2078&file=pdf
BR Audit Statement Date: 2016-07-04
EV Audit: https://cert.webtrust.org/SealFile?seal=2079&file=pdf
EV Audit Statement Date: 2016-07-04
CA Comments: null

____

Kathleen Wilson

unread,
Jul 18, 2017, 3:22:03 PM7/18/17
to mozilla-dev-s...@lists.mozilla.org
-------- Forwarded Message --------
Subject: Summary of July 2017 Audit Reminder Emails
Date: Tue, 18 Jul 2017 19:00:05 +0000 (GMT)


Mozilla: Audit Reminder
Root Certificates:
LuxTrust Global Root 2
Standard Audit: https://bugzilla.mozilla.org/attachment.cgi?id=8777887
Audit Statement Date: 2016-07-26
BR Audit: https://bugzilla.mozilla.org/attachment.cgi?id=8777887
BR Audit Statement Date: 2016-07-26
EV Audit: https://bugzilla.mozilla.org/attachment.cgi?id=8777887
EV Audit Statement Date: 2016-07-26
COMODO RSA Certification Authority**
USERTrust ECC Certification Authority**
AAA Certificate Services**
AddTrust External CA Root**
COMODO Certification Authority**
COMODO ECC Certification Authority**
UTN-USERFirst-Client Authentication and Email**
USERTrust RSA Certification Authority**

** Audit Case in the Common CA Database is under review for this root certificate.
Hellenic Academic and Research Institutions ECC RootCA 2015
Hellenic Academic and Research Institutions RootCA 2015
Standard Audit: http://www.harica.gr/documents/HARICA-ETSI_CERTIFICATE_AUTH_W_ANNEX_REV1.pdf
Audit Statement Date: 2016-07-08
BR Audit: http://www.harica.gr/documents/HARICA-ETSI_CERTIFICATE_AUTH_W_ANNEX_REV1.pdf
BR Audit Statement Date: 2016-07-08
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
Izenpe.com
Standard Audit: https://bug361957.bmoattachments.org/attachment.cgi?id=8775763
Audit Statement Date: 2016-07-22
BR Audit: https://bug361957.bmoattachments.org/attachment.cgi?id=8775763
BR Audit Statement Date: 2016-07-22
EV Audit: https://bug361957.bmoattachments.org/attachment.cgi?id=8775763
EV Audit Statement Date: 2016-07-22
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
PSCProcert
Standard Audit: https://bug593805.bmoattachments.org/attachment.cgi?id=8795484
Audit Statement Date: 2016-08-02
BR Audit: https://bug593805.bmoattachments.org/attachment.cgi?id=8795484
BR Audit Statement Date: 2016-08-02
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
Swisscom Root CA 2
Standard Audit: https://bug1015839.bmoattachments.org/attachment.cgi?id=8781165
Audit Statement Date: 2016-08-15
BR Audit: https://bug1015839.bmoattachments.org/attachment.cgi?id=8781165
BR Audit Statement Date: 2016-08-15
Network Solutions Certificate Authority
Standard Audit: https://cert.webtrust.org/SealFile?seal=2108&file=pdf
Audit Statement Date: 2016-08-05
BR Audit: https://cert.webtrust.org/SealFile?seal=2111&file=pdf
BR Audit Statement Date: 2016-08-05
EV Audit: https://cert.webtrust.org/SealFile?seal=2110&file=pdf
EV Audit Statement Date: 2016-08-05
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:

Kathleen Wilson

unread,
Aug 15, 2017, 4:06:40 PM8/15/17
to mozilla-dev-s...@lists.mozilla.org
-------- Forwarded Message --------
Subject: Summary of August 2017 Audit Reminder Emails
Date: Tue, 15 Aug 2017 19:00:07 +0000 (GMT)

Mozilla: Overdue Audit Statements
Certinomis - Root CA
Certinomis - Autorité Racine
Standard Audit: https://bug937589.bmoattachments.org/attachment.cgi?id=8784555
Audit Statement Date: 2016-08-23
BR Audit: https://bug937589.bmoattachments.org/attachment.cgi?id=8784555
BR Audit Statement Date: 2016-08-23
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
AffirmTrust Commercial
AffirmTrust Networking
AffirmTrust Premium
AffirmTrust Premium ECC
Standard Audit: https://cert.webtrust.org/SealFile?seal=2115&file=pdf
Audit Statement Date: 2016-06-30
BR Audit: https://cert.webtrust.org/SealFile?seal=2116&file=pdf
BR Audit Statement Date: 2016-06-30
EV Audit: https://cert.webtrust.org/SealFile?seal=2093&file=pdf
EV Audit Statement Date: 2016-06-30
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
E-Tugra Certification Authority
Standard Audit: https://bug877744.bmoattachments.org/attachment.cgi?id=8792625
Audit Statement Date: 2016-09-09
BR Audit: https://bug877744.bmoattachments.org/attachment.cgi?id=8792625
BR Audit Statement Date: 2016-09-09
EV Audit: https://bug877744.bmoattachments.org/attachment.cgi?id=8792625
EV Audit Statement Date: 2016-09-09
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
GlobalSign ECC Root CA - R5**
GlobalSign Root CA - R3**
GlobalSign Root CA**
GlobalSign Extended Validation CA - SHA256 - G2 - intermediate cert being treated as root during transition**

** Audit Case in the Common CA Database is under review for this root certificate.

Standard Audit: https://cert.webtrust.org/SealFile?seal=2056&file=pdf
Audit Statement Date: 2016-06-10
BR Audit: https://cert.webtrust.org/SealFile?seal=2054&file=pdf
BR Audit Statement Date: 2016-06-10
EV Audit: https://cert.webtrust.org/SealFile?seal=2055&file=pdf
EV Audit Statement Date: 2016-06-10
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
Go Daddy Class 2 CA
Go Daddy Root Certificate Authority - G2
Starfield Class 2 CA
Starfield Root Certificate Authority - G2
Standard Audit: https://bugzilla.mozilla.org/attachment.cgi?id=8815072
Audit Statement Date: 2016-08-31
BR Audit: https://bugzilla.mozilla.org/attachment.cgi?id=8815073
BR Audit Statement Date: 2016-08-31
EV Audit: https://bugzilla.mozilla.org/attachment.cgi?id=8815074
EV Audit Statement Date: 2016-08-31
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
ACCVRAIZ1
Standard Audit: https://cert.webtrust.org/SealFile?seal=2170&file=pdf
Audit Statement Date: 2016-08-17
BR Audit: https://cert.webtrust.org/SealFile?seal=2171&file=pdf
BR Audit Statement Date: 2016-08-17
CA Comments: Per CA request, Root CA Generalitat Valenciana will be removed via https://bugzilla.mozilla.org/show_bug.cgi?id=1272158

____

Mozilla: Audit Reminder
Root Certificates:
IdenTrust Commercial Root CA 1
IdenTrust Public Sector Root CA 1
DST ACES CA X6
DST Root CA X3
Standard Audit: https://cert.webtrust.org/SealFile?seal=2107&file=pdf
Audit Statement Date: 2016-08-19
BR Audit: https://cert.webtrust.org/SealFile?seal=2106&file=pdf
BR Audit Statement Date: 2016-08-19
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
OpenTrust Root CA G1
OpenTrust Root CA G2
Certplus Root CA G1
OpenTrust Root CA G3
Certplus Root CA G2
Standard Audit: https://bug1297034.bmoattachments.org/attachment.cgi?id=8783476
Audit Statement Date: 2016-08-19
BR Audit: https://bug1297034.bmoattachments.org/attachment.cgi?id=8783476
BR Audit Statement Date: 2016-08-19
EV Audit: https://bug1297034.bmoattachments.org/attachment.cgi?id=8783476
EV Audit Statement Date: 2016-08-19
CA Comments: https://bugzilla.mozilla.org/show_bug.cgi?id=1297034 Did not find reference to "Class 2 Primary CA" in the 2016 audit statements. Update: Audit of Class 2 Primary CA completed mid-October. Waiting for auditor to write attestation letter.

____

Mozilla: Audit Reminder
Root Certificates:
PSCProcert
Standard Audit: https://bug593805.bmoattachments.org/attachment.cgi?id=8795484
Audit Statement Date: 2016-08-02
BR Audit: https://bug593805.bmoattachments.org/attachment.cgi?id=8795484
BR Audit Statement Date: 2016-08-02
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
Security Communication EV RootCA1
SECOM Trust.net - Security Communication RootCA1
Security Communication RootCA2
Standard Audit: https://bugzilla.mozilla.org/attachment.cgi?id=8805235
Audit Statement Date: 2016-08-22
BR Audit: https://bugzilla.mozilla.org/attachment.cgi?id=8805235
BR Audit Statement Date: 2016-08-22
EV Audit: https://bugzilla.mozilla.org/attachment.cgi?id=8805235
EV Audit Statement Date: 2016-08-22
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
Swisscom Root CA 2
Standard Audit: https://bug1015839.bmoattachments.org/attachment.cgi?id=8781165
Audit Statement Date: 2016-08-15
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
T-TeleSec GlobalRoot Class 3
Standard Audit: https://www.tuvit.de/fileadmin/Content/TUV_IT/zertifikate/de/Browser_Audit_Attestation_2017_V2.2_s.pdf
Audit Statement Date: 2017-06-30
EV Audit: https://www.tuvit.de/fileadmin/Content/TUV_IT/zertifikate/en/6761UE_s.pdf
EV Audit Statement Date: 2017-07-31
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
Certum Trusted Network CA 2**
Certum CA**
Certum Trusted Network CA**

** Audit Case in the Common CA Database is under review for this root certificate.

Standard Audit: https://cert.webtrust.org/SealFile?seal=2064&file=pdf
Audit Statement Date: 2016-06-10
BR Audit: https://cert.webtrust.org/SealFile?seal=2066&file=pdf
BR Audit Statement Date: 2016-06-10
EV Audit: https://cert.webtrust.org/SealFile?seal=2065&file=pdf
EV Audit Statement Date: 2016-06-10
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
Visa eCommerce Root
Standard Audit: https://bug1301210.bmoattachments.org/attachment.cgi?id=8789076
Audit Statement Date: 2016-08-23
BR Audit: https://bug1301210.bmoattachments.org/attachment.cgi?id=8795503
BR Audit Statement Date: 2016-09-16

Kathleen Wilson

unread,
Sep 19, 2017, 7:09:25 PM9/19/17
to mozilla-dev-s...@lists.mozilla.org
AC Raíz Certicámara S.A.
Standard Audit: https://cert.webtrust.org/SealFile?seal=2120&file=pdf
Audit Statement Date: 2016-09-15
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
Certinomis - Root CA**

** Audit Case in the Common CA Database is under review for this root certificate.

Standard Audit: https://bug937589.bmoattachments.org/attachment.cgi?id=8784555
Audit Statement Date: 2016-08-23
BR Audit: https://bug937589.bmoattachments.org/attachment.cgi?id=8784555
BR Audit Statement Date: 2016-08-23
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
E-Tugra Certification Authority
Standard Audit: https://bug877744.bmoattachments.org/attachment.cgi?id=8792625
Audit Statement Date: 2016-09-09
BR Audit: https://bug877744.bmoattachments.org/attachment.cgi?id=8792625
BR Audit Statement Date: 2016-09-09
EV Audit: https://bug877744.bmoattachments.org/attachment.cgi?id=8792625
EV Audit Statement Date: 2016-09-09
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
GlobalSign ECC Root CA - R5
Standard Audit: https://cert.webtrust.org/SealFile?seal=2287&file=pdf
Audit Statement Date: 2017-07-26
BR Audit: https://bug1388488.bmoattachments.org/attachment.cgi?id=8895040
BR Audit Statement Date: 2017-07-26
EV Audit: https://cert.webtrust.org/SealFile?seal=2055&file=pdf
EV Audit Statement Date: 2016-06-10
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
Go Daddy Class 2 CA**
Go Daddy Root Certificate Authority - G2**
Starfield Class 2 CA**
Starfield Root Certificate Authority - G2**

** Audit Case in the Common CA Database is under review for this root certificate.

Standard Audit: https://bugzilla.mozilla.org/attachment.cgi?id=8815072
Audit Statement Date: 2016-08-31
BR Audit: https://bugzilla.mozilla.org/attachment.cgi?id=8815073
BR Audit Statement Date: 2016-08-31
EV Audit: https://bugzilla.mozilla.org/attachment.cgi?id=8815074
EV Audit Statement Date: 2016-08-31
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
IdenTrust Commercial Root CA 1
IdenTrust Public Sector Root CA 1
DST ACES CA X6
DST Root CA X3
Standard Audit: https://cert.webtrust.org/SealFile?seal=2107&file=pdf
Audit Statement Date: 2016-08-19
BR Audit: https://cert.webtrust.org/SealFile?seal=2106&file=pdf
BR Audit Statement Date: 2016-08-19
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
OpenTrust Root CA G1
OpenTrust Root CA G2
Certplus Root CA G1
OpenTrust Root CA G3
Certplus Root CA G2
Standard Audit: https://bug1297034.bmoattachments.org/attachment.cgi?id=8783476
Audit Statement Date: 2016-08-19
BR Audit: https://bug1297034.bmoattachments.org/attachment.cgi?id=8783476
BR Audit Statement Date: 2016-08-19
EV Audit: https://bug1297034.bmoattachments.org/attachment.cgi?id=8783476
EV Audit Statement Date: 2016-08-19
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
Certum Trusted Network CA 2**

Kurt Roeckx

unread,
Sep 20, 2017, 9:34:04 AM9/20/17
to mozilla-dev-s...@lists.mozilla.org
On 2017-09-20 01:09, Kathleen Wilson wrote:
> -------- Forwarded Message --------
> Subject: Summary of September 2017 Audit Reminder Emails
> Date: Tue, 19 Sep 2017 19:00:08 +0000 (GMT)
>
> Mozilla: Overdue Audit Statements
> Root Certificates:
> Autoridad de Certificacion Firmaprofesional CIF A62634068
> Standard Audit: https://cert.webtrust.org/SealFile?seal=2032&file=pdf
> Audit Statement Date: 2016-04-11
> BR Audit: https://bug521439.bmoattachments.org/attachment.cgi?id=8809981
> BR Audit Statement Date: 2016-08-05
> EV Audit: https://bug521439.bmoattachments.org/attachment.cgi?id=8809982
> EV Audit Statement Date: 2016-08-05
> CA Comments: BR and EV audits have happened, but there are action plans being presented to the auditors. Primary issues are use of UTF8 instead of PrintableString in jurisdictionOfIncorporation, and a recently repealed Spanish law that required privat

Does that mean the standard audit did not happen? The currently linked
one covered the period 2015-03-10 to 2016-03-09. The next period of 1
year is now over for more than 6 months.

If the audits happened, why don't we have the audit statement yet?

> Mozilla: Audit Reminder
> Root Certificates:
> Chambers of Commerce Root
> Chambers of Commerce Root - 2008
> Global Chambersign Root
> Global Chambersign Root - 2008
> Standard Audit: https://bug986854.bmoattachments.org/attachment.cgi?id=8775118
> Audit Statement Date: 2016-06-17
> BR Audit: https://bugzilla.mozilla.org/attachment.cgi?id=8800807
> BR Audit Statement Date: 2016-08-05
> EV Audit: https://bugzilla.mozilla.org/attachment.cgi?id=8800811
> EV Audit Statement Date: 2016-08-05
> CA Comments: null

The standard audit was for the period of 2015-04-14 to 2016-04-13, and
so are also late with their audit.

> Mozilla: Audit Reminder
> Root Certificates:
> GlobalSign ECC Root CA - R5
> Standard Audit: https://cert.webtrust.org/SealFile?seal=2287&file=pdf
> Audit Statement Date: 2017-07-26
> BR Audit: https://bug1388488.bmoattachments.org/attachment.cgi?id=8895040
> BR Audit Statement Date: 2017-07-26
> EV Audit: https://cert.webtrust.org/SealFile?seal=2055&file=pdf
> EV Audit Statement Date: 2016-06-10
> CA Comments: null

The EV period was from 2015-04-01 to 2013-03-31. The others are new,
maybe forgot to update something?

> Mozilla: Audit Reminder
> Root Certificates:
> Certum Trusted Network CA 2**
> Certum Trusted Network CA**
>
> ** Audit Case in the Common CA Database is under review for this root certificate.
>
> Standard Audit: https://cert.webtrust.org/SealFile?seal=2064&file=pdf
> Audit Statement Date: 2016-06-10
> BR Audit: https://cert.webtrust.org/SealFile?seal=2066&file=pdf
> BR Audit Statement Date: 2016-06-10
> EV Audit: https://cert.webtrust.org/SealFile?seal=2065&file=pdf
> EV Audit Statement Date: 2016-06-10
> CA Comments: null

The period was 2015-04-15 to 2016-04-14.



Kurt

Chema Lopez

unread,
Sep 23, 2017, 6:38:21 AM9/23/17
to mozilla-dev-s...@lists.mozilla.org
The audit statements has been updated in the Case https://ccadb.force.com/5001J00000TMlAf

Kathleen Wilson

unread,
Oct 17, 2017, 5:44:11 PM10/17/17
to mozilla-dev-s...@lists.mozilla.org
A lot of the delay this time is in regards to our new Audit Case process. We'll work to get this cleared up this month.

-------- Forwarded Message --------
Subject: Summary of October 2017 Audit Reminder Emails
Date: Tue, 17 Oct 2017 19:00:06 +0000 (GMT)

Mozilla: Overdue Audit Statements
Root Certificates:
Autoridad de Certificacion Firmaprofesional CIF A62634068
Standard Audit: https://cert.webtrust.org/SealFile?seal=2032&file=pdf
Audit Statement Date: 2016-04-11
BR Audit: https://bug521439.bmoattachments.org/attachment.cgi?id=8809981
BR Audit Statement Date: 2016-08-05
EV Audit: https://bug521439.bmoattachments.org/attachment.cgi?id=8809982
EV Audit Statement Date: 2016-08-05
CA Comments: BR and EV audits have happened, but there are action plans being presented to the auditors. Primary issues are use of UTF8 instead of PrintableString in jurisdictionOfIncorporation, and a recently repealed Spanish law that required privat

____

Mozilla: Audit Reminder
Root Certificates:
CA Disig Root R1
CA Disig Root R2
Standard Audit: https://eidas.disig.sk/pdf/Audit2016_report.pdf
Audit Statement Date: 2016-10-26
BR Audit: https://eidas.disig.sk/pdf/Audit2016_report.pdf
BR Audit Statement Date: 2016-10-26
CA Comments: null

____

Mozilla: Overdue Audit Statements
Root Certificates:
Chambers of Commerce Root**
Chambers of Commerce Root - 2008**
Global Chambersign Root**
Global Chambersign Root - 2008**

** Audit Case in the Common CA Database is under review for this root certificate.

Standard Audit: https://bug986854.bmoattachments.org/attachment.cgi?id=8775118
Audit Statement Date: 2016-06-17
BR Audit: https://bugzilla.mozilla.org/attachment.cgi?id=8800807
BR Audit Statement Date: 2016-08-05
EV Audit: https://bugzilla.mozilla.org/attachment.cgi?id=8800811
EV Audit Statement Date: 2016-08-05
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
AC Raíz Certicámara S.A.
Standard Audit: https://cert.webtrust.org/SealFile?seal=2120&file=pdf
Audit Statement Date: 2016-09-15
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
Chunghwa Telecom Co., Ltd. - ePKI Root Certification Authority**

** Audit Case in the Common CA Database is under review for this root certificate.

Standard Audit: https://cert.webtrust.org/SealFile?seal=2277&file=pdf
Audit Statement Date: 2016-11-04
BR Audit: https://cert.webtrust.org/SealFile?seal=2278&file=pdf
BR Audit Statement Date: 2016-11-04
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
Go Daddy Class 2 CA**
Go Daddy Root Certificate Authority - G2**
Starfield Class 2 CA**
Starfield Root Certificate Authority - G2**

** Audit Case in the Common CA Database is under review for this root certificate.

Standard Audit: https://bugzilla.mozilla.org/attachment.cgi?id=8815072
Audit Statement Date: 2016-08-31
BR Audit: https://bugzilla.mozilla.org/attachment.cgi?id=8815073
BR Audit Statement Date: 2016-08-31
EV Audit: https://bugzilla.mozilla.org/attachment.cgi?id=8815074
EV Audit Statement Date: 2016-08-31
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
IdenTrust Commercial Root CA 1**
IdenTrust Public Sector Root CA 1**
DST ACES CA X6**
DST Root CA X3**

** Audit Case in the Common CA Database is under review for this root certificate.

Standard Audit: https://cert.webtrust.org/SealFile?seal=2107&file=pdf
Audit Statement Date: 2016-08-19
BR Audit: https://cert.webtrust.org/SealFile?seal=2106&file=pdf
BR Audit Statement Date: 2016-08-19
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
NetLock Arany (Class Gold) F?tanúsítvány
Standard Audit: https://bugzilla.mozilla.org/attachment.cgi?id=8803550
Audit Statement Date: 2016-10-20
BR Audit: https://bugzilla.mozilla.org/attachment.cgi?id=8803550
BR Audit Statement Date: 2016-10-20
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
OpenTrust Root CA G1**
OpenTrust Root CA G2**
Certplus Root CA G1**
OpenTrust Root CA G3**
Certplus Root CA G2**

** Audit Case in the Common CA Database is under review for this root certificate.

Standard Audit: https://bug1297034.bmoattachments.org/attachment.cgi?id=8783476
Audit Statement Date: 2016-08-19
BR Audit: https://bug1297034.bmoattachments.org/attachment.cgi?id=8783476
BR Audit Statement Date: 2016-08-19
EV Audit: https://bug1297034.bmoattachments.org/attachment.cgi?id=8783476
EV Audit Statement Date: 2016-08-19
CA Comments: https://bugzilla.mozilla.org/show_bug.cgi?id=1297034 Did not find reference to "Class 2 Primary CA" in the 2016 audit statements. Update: Audit of Class 2 Primary CA completed mid-October. Waiting for auditor to write attestation letter.

____

Mozilla: Audit Reminder
Root Certificates:
Security Communication EV RootCA1
Standard Audit: https://bugzilla.mozilla.org/attachment.cgi?id=8805235
Audit Statement Date: 2016-08-22
BR Audit: https://bugzilla.mozilla.org/attachment.cgi?id=8805235
BR Audit Statement Date: 2016-08-22
EV Audit: https://bugzilla.mozilla.org/attachment.cgi?id=8805235
EV Audit Statement Date: 2016-08-22
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
Swisscom Root CA 2
Standard Audit: https://bug1015839.bmoattachments.org/attachment.cgi?id=8781165
Audit Statement Date: 2016-08-15
CA Comments: null

____

Mozilla: Overdue Audit Statements
Root Certificates:
Certum Trusted Network CA 2**
Certum Trusted Network CA**

** Audit Case in the Common CA Database is under review for this root certificate.

Standard Audit: https://cert.webtrust.org/SealFile?seal=2064&file=pdf
Audit Statement Date: 2016-06-10
BR Audit: https://cert.webtrust.org/SealFile?seal=2066&file=pdf
BR Audit Statement Date: 2016-06-10
EV Audit: https://cert.webtrust.org/SealFile?seal=2065&file=pdf
EV Audit Statement Date: 2016-06-10
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
Visa eCommerce Root**

** Audit Case in the Common CA Database is under review for this root certificate.

Standard Audit: https://bug1301210.bmoattachments.org/attachment.cgi?id=8789076
Audit Statement Date: 2016-08-23
BR Audit: https://bug1301210.bmoattachments.org/attachment.cgi?id=8795503
BR Audit Statement Date: 2016-09-16
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
Network Solutions Certificate Authority**

** Audit Case in the Common CA Database is under review for this root certificate.

BR Audit Statement Date: 2016-08-05
EV Audit: https://cert.webtrust.org/SealFile?seal=2110&file=pdf
EV Audit Statement Date: 2016-08-05
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
CFCA EV ROOT
Standard Audit: https://cert.webtrust.org/SealFile?seal=2186&file=pdf
Audit Statement Date: 2016-10-31
BR Audit: https://cert.webtrust.org/SealFile?seal=2185&file=pdf
BR Audit Statement Date: 2016-10-31
EV Audit: https://cert.webtrust.org/SealFile?seal=2187&file=pdf
EV Audit Statement Date: 2016-10-31
CA Comments: null

____

Kathleen Wilson

unread,
Oct 17, 2017, 5:57:06 PM10/17/17
to mozilla-dev-s...@lists.mozilla.org
On Tuesday, October 17, 2017 at 2:44:11 PM UTC-7, Kathleen Wilson wrote:
> A lot of the delay this time is in regards to our new
> Audit Case process.
> We'll work to get this cleared up this month.


To those of you CAs who have correctly followed the instructions for providing your annual updates -- THANK YOU!!!
Many of you have done this successfully without any problems.


To the rest of the CAs, Please help us out here, by reading and following the instructions.

http://ccadb.org/cas/updates

"The process for submitting an annual update is as follows: CAs will create a single Audit Case for a particular set of audits (e.g. WebTrust CA, WebTrust BR, and WebTrust EV). Then the CA will create a set of corresponding Root Cases, one per root, to tell the CCADB which Root Certificate records the audit statements in that Audit Case apply to."

We've had CAs file multiple Audit Cases for the same audit statements, with different information. Please don't do that. You only need to file one Audit Case for each set of audit statements. If you are unsure, please just create one Audit Case and then send email to me and Aaron so we can help you out.

Some CAs do not create the corresponding Root Cases to indicate which root certs were in scope of the audits and to provide the 3 test websites that are required by the BRs.

Many of the CAs unfortunately have not tested their 3 test websites to ensure that the TLS certs chain up to those root certs and have the correct results.

All of this is described in
http://ccadb.org/cas/updates

We continue to work to improve the interface to make it more obvious what you need to do. But in the meantime please carefully read and follow the instructions.

Thanks,
Kathleen


Kathleen Wilson

unread,
Nov 21, 2017, 3:17:05 PM11/21/17
to mozilla-dev-s...@lists.mozilla.org
Note to CAs: The indicator that an Audit Case is under review for
particular root certs will only be added if there has been a
corresponding Audit Root Case created for that particular root cert. If
you have only created the Audit Case (and not the Audit Root Cases),
that will not be indicated below.

http://ccadb.org/cas/updates
"CAs will create a single Audit Case for a particular set of audits
(e.g. WebTrust CA, WebTrust BR, and WebTrust EV). Then the CA will
create a set of corresponding Root Cases, one per root, to tell the
CCADB which Root Certificate records the audit statements in that Audit
Case apply to."


-------- Forwarded Message --------
Subject: Summary of November 2017 Audit Reminder Emails
Date: Tue, 21 Nov 2017 20:00:14 +0000 (GMT)

Mozilla: Audit Reminder
Root Certificates:
EE Certification Centre Root CA
Standard Audit: https://bugzilla.mozilla.org/attachment.cgi?id=8826692
Audit Statement Date: 2016-11-25
BR Audit: https://bugzilla.mozilla.org/attachment.cgi?id=8826692
BR Audit Statement Date: 2016-11-25
CA Comments: null

____

Mozilla: Overdue Audit Statements
Root Certificates:
Autoridad de Certificacion Firmaprofesional CIF A62634068**

** Audit Case in the Common CA Database is under review for this root
certificate.

Standard Audit: https://cert.webtrust.org/SealFile?seal=2032&file=pdf
Audit Statement Date: 2016-04-11
BR Audit: https://bug521439.bmoattachments.org/attachment.cgi?id=8809981
BR Audit Statement Date: 2016-08-05
EV Audit: https://bug521439.bmoattachments.org/attachment.cgi?id=8809982
EV Audit Statement Date: 2016-08-05
CA Comments: https://bugzilla.mozilla.org/show_bug.cgi?id=1412950
Misunderstanding when switching from WebTrust to eIDAS/ETSI audit -
resulted in point-in-time audit that Mozilla has not accepted. On
October 31 CA requested 90 days to get period-of-time audits.

____

Mozilla: Audit Reminder
Root Certificates:
CA Disig Root R1
CA Disig Root R2
Standard Audit: https://eidas.disig.sk/pdf/Audit2016_report.pdf
Audit Statement Date: 2016-10-26
BR Audit: https://eidas.disig.sk/pdf/Audit2016_report.pdf
BR Audit Statement Date: 2016-10-26
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
AC Raíz Certicámara S.A.
Standard Audit: https://cert.webtrust.org/SealFile?seal=2120&file=pdf
Audit Statement Date: 2016-09-15
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
D-TRUST Root CA 3 2013
Standard Audit:
https://www.tuvit.de/fileadmin/Content/TUV_IT/zertifikate/en/6768UE_s.pdf
Audit Statement Date: 2016-11-21
BR Audit:
BR Audit Statement Date:
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1
Standard Audit:
https://bug1262809.bmoattachments.org/attachment.cgi?id=8819839
Audit Statement Date: 2016-12-19
BR Audit: https://bug1262809.bmoattachments.org/attachment.cgi?id=8819839
BR Audit Statement Date: 2016-12-19
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
NetLock Arany (Class Gold) F?tanúsítvány**

** Audit Case in the Common CA Database is under review for this root
certificate.

Secure Global CA
SecureTrust CA
XRamp Global Certification Authority
Standard Audit: https://cert.webtrust.org/SealFile?seal=2138&file=pdf
Audit Statement Date: 2016-11-18
BR Audit: https://cert.webtrust.org/SealFile?seal=2139&file=pdf
BR Audit Statement Date: 2016-11-18
EV Audit: https://cert.webtrust.org/SealFile?seal=2140&file=pdf
EV Audit Statement Date: 2016-11-18
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
Visa eCommerce Root**

** Audit Case in the Common CA Database is under review for this root
certificate.

Standard Audit:
https://bug1301210.bmoattachments.org/attachment.cgi?id=8789076
Audit Statement Date: 2016-08-23
BR Audit: https://bug1301210.bmoattachments.org/attachment.cgi?id=8795503
BR Audit Statement Date: 2016-09-16
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
CFCA EV ROOT
Standard Audit: https://cert.webtrust.org/SealFile?seal=2186&file=pdf
Audit Statement Date: 2016-10-31
BR Audit: https://cert.webtrust.org/SealFile?seal=2185&file=pdf
BR Audit Statement Date: 2016-10-31
EV Audit: https://cert.webtrust.org/SealFile?seal=2187&file=pdf
EV Audit Statement Date: 2016-10-31
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
GlobalSign ECC Root CA - R4**
GlobalSign Root CA - R2**

** Audit Case in the Common CA Database is under review for this root
certificate.

Standard Audit:
https://bug1325532.bmoattachments.org/attachment.cgi?id=8844281
Audit Statement Date: 2016-11-17
BR Audit: https://bug1325532.bmoattachments.org/attachment.cgi?id=8844281
BR Audit Statement Date: 2016-11-17
CA Comments: null

____


Kathleen Wilson

unread,
Jan 3, 2018, 7:36:55 PM1/3/18
to mozilla-dev-s...@lists.mozilla.org
Wishing all of you a happy 2018!

Below is the summary of the audit reminder email that was automatically
sent by the CCADB in December.

PS: I am back at work as of today, but I will appreciate your patience
while to catch up on my email inbox. If there is anything urgent, you
might want to prepend URGENT to the subject and re-send to me.


-------- Forwarded Message --------
Subject: Summary of December 2017 Audit Reminder Emails
Date: Tue, 19 Dec 2017 20:00:20 +0000 (GMT)

Mozilla: Audit Reminder
Root Certificates:
TrustCor RootCert CA-2
TrustCor RootCert CA-1
TrustCor ECA-1
Standard Audit: https://cert.webtrust.org/SealFile?seal=2169&file=pdf
Audit Statement Date: 2016-12-15
BR Audit: https://cert.webtrust.org/SealFile?seal=2163&file=pdf
BR Audit Statement Date: 2016-12-15
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
EE Certification Centre Root CA**

** Audit Case in the Common CA Database is under review for this root
certificate.

Standard Audit: https://bugzilla.mozilla.org/attachment.cgi?id=8826692
Audit Statement Date: 2016-11-25
BR Audit: https://bugzilla.mozilla.org/attachment.cgi?id=8826692
BR Audit Statement Date: 2016-11-25
CA Comments: null

____

Mozilla: Your root is in danger of being removed
Root Certificates:
Autoridad de Certificacion Firmaprofesional CIF A62634068**

** Audit Case in the Common CA Database is under review for this root
certificate.

Standard Audit: https://cert.webtrust.org/SealFile?seal=2032&file=pdf
Audit Statement Date: 2016-04-11
BR Audit: https://bug521439.bmoattachments.org/attachment.cgi?id=8809981
BR Audit Statement Date: 2016-08-05
EV Audit: https://bug521439.bmoattachments.org/attachment.cgi?id=8809982
EV Audit Statement Date: 2016-08-05
CA Comments: https://bugzilla.mozilla.org/show_bug.cgi?id=1412950
Misunderstanding when switching from WebTrust to eIDAS/ETSI audit -
resulted in point-in-time audit that Mozilla has not accepted. On
October 31 CA requested 90 days to get period-of-time audits.

____

Mozilla: Audit Reminder
Root Certificates:
CA Disig Root R2
Standard Audit: https://eidas.disig.sk/pdf/Audit2016_report.pdf
Audit Statement Date: 2016-10-26
BR Audit: https://eidas.disig.sk/pdf/Audit2016_report.pdf
BR Audit Statement Date: 2016-10-26
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
AC Raíz Certicámara S.A.
Standard Audit: https://cert.webtrust.org/SealFile?seal=2120&file=pdf
Audit Statement Date: 2016-09-15
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
D-TRUST Root CA 3 2013**

** Audit Case in the Common CA Database is under review for this root
certificate.

Standard Audit:
https://www.tuvit.de/fileadmin/Content/TUV_IT/zertifikate/en/6768UE_s.pdf
Audit Statement Date: 2016-11-21
BR Audit:
BR Audit Statement Date:
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1
Standard Audit:
https://bug1262809.bmoattachments.org/attachment.cgi?id=8819839
Audit Statement Date: 2016-12-19
BR Audit: https://bug1262809.bmoattachments.org/attachment.cgi?id=8819839
BR Audit Statement Date: 2016-12-19
CA Comments: null

____

Mozilla: Overdue Audit Statements
Root Certificates:
OpenTrust Root CA G1**
OpenTrust Root CA G2**
Certplus Root CA G1**
Class 2 Primary CA
OpenTrust Root CA G3**
Certplus Root CA G2**

** Audit Case in the Common CA Database is under review for this root
certificate.

Standard Audit:
https://bug1297034.bmoattachments.org/attachment.cgi?id=8783476
Audit Statement Date: 2016-08-19
Standard Audit:
https://bug1297034.bmoattachments.org/attachment.cgi?id=8849236
Audit Statement Date: 2017-01-14
BR Audit: https://bug1297034.bmoattachments.org/attachment.cgi?id=8783476
BR Audit Statement Date: 2016-08-19
BR Audit: https://bug1297034.bmoattachments.org/attachment.cgi?id=8849236
BR Audit Statement Date: 2017-01-14
EV Audit: https://bug1297034.bmoattachments.org/attachment.cgi?id=8783476
EV Audit Statement Date: 2016-08-19
EV Audit: https://bug1297034.bmoattachments.org/attachment.cgi?id=8849236
EV Audit Statement Date: 2017-01-14
CA Comments: https://bugzilla.mozilla.org/show_bug.cgi?id=1297034 Did
not find reference to "Class 2 Primary CA" in the 2016 audit statements.
Update: Audit of Class 2 Primary CA completed mid-October. Waiting for
auditor to write attestation letter.

____

Mozilla: Audit Reminder
Root Certificates:
Secure Global CA
SecureTrust CA
XRamp Global Certification Authority
Standard Audit: https://cert.webtrust.org/SealFile?seal=2138&file=pdf
Audit Statement Date: 2016-11-18
BR Audit: https://cert.webtrust.org/SealFile?seal=2139&file=pdf
BR Audit Statement Date: 2016-11-18
EV Audit: https://cert.webtrust.org/SealFile?seal=2140&file=pdf
EV Audit Statement Date: 2016-11-18
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H5
Standard Audit: https://bugzilla.mozilla.org/attachment.cgi?id=8828490
Audit Statement Date: 2016-12-31
BR Audit:
https://www.tuvit.de/fileadmin/Content/TUV_IT/zertifikate/en/6749UE_s.pdf
BR Audit Statement Date: 2016-12-31

Kathleen Wilson

unread,
Jan 16, 2018, 3:16:43 PM1/16/18
to mozilla-dev-s...@lists.mozilla.org
Below is the summary of the audit reminder email that was automatically
sent by the CCADB today.

-------- Forwarded Message --------
Subject: Summary of January 2018 Audit Reminder Emails
Date: Tue, 16 Jan 2018 20:00:04 +0000 (GMT)

Mozilla: Audit Reminder
Root Certificates:
ISRG Root X1
Standard Audit: https://cert.webtrust.org/SealFile?seal=2193&file=pdf
Audit Statement Date: 2017-02-07
BR Audit: https://cert.webtrust.org/SealFile?seal=2194&file=pdf
BR Audit Statement Date: 2017-02-07
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
EE Certification Centre Root CA
Standard Audit:
https://sk.ee/upload/files/AA2017112401_Audit%20Attestation_final.pdf
Audit Statement Date: 2017-11-24
BR Audit: https://bugzilla.mozilla.org/attachment.cgi?id=8826692
BR Audit Statement Date: 2016-11-25
CA Comments: null

____

Mozilla: Overdue Audit Statements
Root Certificates:
AC Raíz Certicámara S.A.
Standard Audit: https://cert.webtrust.org/SealFile?seal=2120&file=pdf
Audit Statement Date: 2016-09-15
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
Certigna
Standard Audit: https://bugzilla.mozilla.org/attachment.cgi?id=8836773
Audit Statement Date: 2017-02-03
BR Audit: https://bugzilla.mozilla.org/attachment.cgi?id=8836773
BR Audit Statement Date: 2017-02-03
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
certSIGN ROOT CA
Standard Audit:
https://www.certsign.ro/certsign_en/files/certSIGN_Webtrust_CA_8.02.2017.pdf
Audit Statement Date: 2017-02-08
BR Audit:
https://www.certsign.ro/certsign_en/files/certSIGN_Webtrust_CA_8.02.2017.pdf
BR Audit Statement Date: 2017-02-08
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
Class 2 Primary CA
Standard Audit:
https://bug1297034.bmoattachments.org/attachment.cgi?id=8849236
Audit Statement Date: 2017-01-14
BR Audit: https://bug1297034.bmoattachments.org/attachment.cgi?id=8849236
BR Audit Statement Date: 2017-01-14
EV Audit: https://bug1297034.bmoattachments.org/attachment.cgi?id=8849236
EV Audit Statement Date: 2017-01-14
CA Comments: https://bugzilla.mozilla.org/show_bug.cgi?id=1297034 Did
not find reference to "Class 2 Primary CA" in the 2016 audit statements.
Update: Audit of Class 2 Primary CA completed mid-October. Waiting for
auditor to write attestation letter.

____

Mozilla: Audit Reminder
Root Certificates:

Kathleen Wilson

unread,
Jan 17, 2018, 7:24:56 PM1/17/18
to mozilla-dev-s...@lists.mozilla.org
On 1/4/18 3:53 AM, Kurt Roeckx wrote:
> On 2018-01-04 01:36, Kathleen Wilson wrote:
>>
>> Mozilla: Audit Reminder
>> Root Certificates:
>>     AC Raíz Certicámara S.A.
>> Standard Audit: https://cert.webtrust.org/SealFile?seal=2120&file=pdf
>> Audit Statement Date: 2016-09-15
>> CA Comments: null
>
> The audit period of that is 2015-07-01 to 2016-04-30. They clearly
> overdue, instead of just a reminder.
>
>
> Kurt


There are two root certs with
Certificate Issuer Common Name: AC Raíz Certicámara S.A.
Certificate Issuer Organization: Sociedad Cameral de Certificación
Digital - Certicámara S.A.

One is included in Mozilla's program with only the Email trust bit
enabled. The other is not yet included in Mozilla's program
(https://bugzilla.mozilla.org/show_bug.cgi?id=1281002).

There had been a mistake in the way that the Audit Case was handled, so
the root cert included in Mozilla's program had not been updated with
the current audit statement.
https://cert.webtrust.org/SealFile?seal=2333&file=pdf

I have resolved this discrepency.

Thanks,
Kathleen

Kathleen Wilson

unread,
Feb 20, 2018, 6:11:48 PM2/20/18
to mozilla-dev-s...@lists.mozilla.org
Summary of audit statements that are due:

-------- Forwarded Message --------
Subject: Summary of February 2018 Audit Reminder Emails
Date: Tue, 20 Feb 2018 20:00:05 +0000 (GMT)

Mozilla: Audit Reminder
Root Certificates:
ISRG Root X1
Standard Audit: https://cert.webtrust.org/SealFile?seal=2193&file=pdf
Audit Statement Date: 2017-02-07
BR Audit: https://cert.webtrust.org/SealFile?seal=2194&file=pdf
BR Audit Statement Date: 2017-02-07
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
Staat der Nederlanden EV Root CA
Staat der Nederlanden Root CA - G3
Staat der Nederlanden Root CA - G2
Standard Audit: https://cert.webtrust.org/SealFile?seal=2204&file=pdf
Audit Statement Date: 2017-03-03
BR Audit: https://cert.webtrust.org/SealFile?seal=2204&file=pdf
BR Audit Statement Date: 2017-03-03
EV Audit: https://cert.webtrust.org/SealFile?seal=2204&file=pdf
EV Audit Statement Date: 2017-03-03
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
certSIGN ROOT CA
Standard Audit:
https://www.certsign.ro/certsign_en/files/certSIGN_Webtrust_CA_8.02.2017.pdf
Audit Statement Date: 2017-02-08
BR Audit:
https://www.certsign.ro/certsign_en/files/certSIGN_Webtrust_CA_8.02.2017.pdf
BR Audit Statement Date: 2017-02-08
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
Symantec Class 1 Public Primary Certification Authority - G4**
Symantec Class 2 Public Primary Certification Authority - G4**
Symantec Class 2 Public Primary Certification Authority - G6**
VeriSign Class 1 Public Primary Certification Authority - G3**
VeriSign Class 2 Public Primary Certification Authority - G3**
VeriSign Class 3 Public Primary Certification Authority - G3**
VeriSign Class 3 Public Primary Certification Authority - G4**
VeriSign Class 3 Public Primary Certification Authority - G5**
VeriSign Universal Root Certification Authority**
Symantec Class 1 Public Primary Certification Authority - G6**

** Audit Case in the Common CA Database is under review for this root
certificate.

Standard Audit:
https://www.symantec.com/content/en/us/about/media/repository/18_Symantec_STN_WTCA_period_end_11-30-2016.pdf
Audit Statement Date: 2017-02-28
BR Audit:
BR Audit Statement Date:
BR Audit:
https://www.symantec.com/content/en/us/about/media/repository/21_Symantec_STN_WTBR_period_end_11-30-2016.pdf
BR Audit Statement Date: 2017-02-28
EV Audit:
EV Audit Statement Date:
EV Audit:
https://www.symantec.com/content/en/us/about/media/repository/24_Symantec_STN_WTEV_period_end_11-30-2016.pdf
EV Audit Statement Date: 2017-02-28
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
Hongkong Post Root CA 1
Standard Audit: https://cert.webtrust.org/SealFile?seal=2208&file=pdf
Audit Statement Date: 2017-02-28
BR Audit:
http://www.hongkongpost.gov.hk/product/cps/ecert/img/HKPCA_WebTrust_BR_2016-17.pdf
BR Audit Statement Date: 2017-02-28
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
Class 2 Primary CA
Standard Audit:
https://bug1297034.bmoattachments.org/attachment.cgi?id=8849236
Audit Statement Date: 2017-01-14
BR Audit: https://bug1297034.bmoattachments.org/attachment.cgi?id=8849236
BR Audit Statement Date: 2017-01-14
EV Audit: https://bug1297034.bmoattachments.org/attachment.cgi?id=8849236
EV Audit Statement Date: 2017-01-14
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
TWCA Global Root CA
TWCA Root Certification Authority
Standard Audit: https://cert.webtrust.org/SealFile?seal=2197&file=pdf
Audit Statement Date: 2017-02-16
BR Audit: https://cert.webtrust.org/SealFile?seal=2195&file=pdf
BR Audit Statement Date: 2017-02-16
EV Audit: https://cert.webtrust.org/SealFile?seal=2196&file=pdf
EV Audit Statement Date: 2017-02-16
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
Trustis Limited - Trustis FPS Root CA**

** Audit Case in the Common CA Database is under review for this root
certificate.

Standard Audit:
https://bug1360184.bmoattachments.org/attachment.cgi?id=8862399
Audit Statement Date: 2017-03-01
BR Audit: https://bug1360184.bmoattachments.org/attachment.cgi?id=8862399
BR Audit Statement Date: 2017-03-01
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H5

Kathleen Wilson

unread,
Mar 20, 2018, 3:08:35 PM3/20/18
to mozilla-dev-s...@lists.mozilla.org
-------- Forwarded Message --------
Subject: Summary of March 2018 Audit Reminder Emails
Date: Tue, 20 Mar 2018 19:00:18 +0000 (GMT)

Mozilla: Audit Reminder
Root Certificates:
GDCA TrustAUTH R5 ROOT
Standard Audit: https://cert.webtrust.org/SealFile?seal=2231&file=pdf
Audit Statement Date: 2017-04-14
BR Audit: https://cert.webtrust.org/SealFile?seal=2232&file=pdf
BR Audit Statement Date: 2017-04-14
EV Audit: https://cert.webtrust.org/SealFile?seal=2233&file=pdf
EV Audit Statement Date: 2017-04-14
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
SZAFIR ROOT CA2
Standard Audit: https://cert.webtrust.org/SealFile?seal=2239&file=pdf
Audit Statement Date: 2017-04-12
BR Audit: https://cert.webtrust.org/SealFile?seal=2239&file=pdf
BR Audit Statement Date: 2017-04-12
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
certSIGN ROOT CA**

** Audit Case in the Common CA Database is under review for this root
certificate.

Standard Audit:
CA Comments: Previous audit statement date was same as audit period end
date, Feb 8 2017. The 2018 audit period end date is Feb 7 2018, which
means CertSign has until early May 2018 to provide their new audit
statement.

____

Mozilla: Audit Reminder
Root Certificates:
Baltimore CyberTrust Root
Cybertrust Global Root
DigiCert Assured ID Root CA
DigiCert Assured ID Root G2
DigiCert Assured ID Root G3
DigiCert High Assurance EV Root CA
DigiCert Trusted Root G4
Standard Audit: https://cert.webtrust.org/SealFile?seal=2228&file=pdf
Audit Statement Date: 2017-04-13
BR Audit: https://cert.webtrust.org/SealFile?seal=2229&file=pdf
BR Audit Statement Date: 2017-04-13
EV Audit: https://cert.webtrust.org/SealFile?seal=2230&file=pdf
EV Audit Statement Date: 2017-04-13
QuoVadis Root CA 1 G3
QuoVadis Root CA 2
QuoVadis Root CA 2 G3
QuoVadis Root CA 3
QuoVadis Root CA 3 G3
QuoVadis Root Certification Authority
Standard Audit: https://cert.webtrust.org/SealFile?seal=2223&file=pdf
Audit Statement Date: 2017-03-31
BR Audit: https://cert.webtrust.org/SealFile?seal=2222&file=pdf
BR Audit Statement Date: 2017-03-31
EV Audit: https://cert.webtrust.org/SealFile?seal=2221&file=pdf
EV Audit Statement Date: 2017-03-31
CA Comments:
https://www.wisekey.com/investors_press-release/wisekey-sixwihn-signs-letter-of-intent-to-acquire-quovadis-consolidating-certification-authority-power-for-eidas-and-iot

____

Mozilla: Audit Reminder
Root Certificates:
SwissSign Platinum CA - G2
SwissSign Silver CA - G2
Standard Audit: https://bugzilla.mozilla.org/attachment.cgi?id=8861552
Audit Statement Date: 2017-03-30
BR Audit: https://bugzilla.mozilla.org/attachment.cgi?id=8861552
BR Audit Statement Date: 2017-03-30
Mozilla: Audit Reminder
Root Certificates:
Amazon Root CA 3
Amazon Root CA 2
Starfield Services Root Certificate Authority - G2
Amazon Root CA 1
Amazon Root CA 4
Standard Audit: https://cert.webtrust.org/SealFile?seal=2217&file=pdf
Audit Statement Date: 2017-03-28
BR Audit: https://cert.webtrust.org/SealFile?seal=2218&file=pdf
BR Audit Statement Date: 2017-03-28
EV Audit: https://cert.webtrust.org/SealFile?seal=2219&file=pdf
EV Audit Statement Date: 2017-03-28
CA Comments: null

____

Kurt Roeckx

unread,
Mar 20, 2018, 3:44:07 PM3/20/18
to Kathleen Wilson, mozilla-dev-s...@lists.mozilla.org
On Tue, Mar 20, 2018 at 12:07:54PM -0700, Kathleen Wilson via dev-security-policy wrote:
> Mozilla: Audit Reminder
> Root Certificates:
> Class 2 Primary CA
> Standard Audit:
> https://bug1297034.bmoattachments.org/attachment.cgi?id=8849236
> Audit Statement Date: 2017-01-14
> BR Audit: https://bug1297034.bmoattachments.org/attachment.cgi?id=8849236
> BR Audit Statement Date: 2017-01-14
> EV Audit: https://bug1297034.bmoattachments.org/attachment.cgi?id=8849236
> EV Audit Statement Date: 2017-01-14
> CA Comments: null

The audit period was 2015-10-14 to 2016-10-14, we should already
have received a new audit statement.


Kurt

Kathleen Wilson

unread,
Mar 20, 2018, 7:30:51 PM3/20/18
to mozilla-dev-s...@lists.mozilla.org

Weitsong Lin

unread,
Mar 20, 2018, 10:49:49 PM3/20/18
to mozilla-dev-s...@lists.mozilla.org
TWCA have been updated the CAADB.
Do we have to open the bug to update audit report status?

Thanks,
Robin Lin

Kathleen Wilson於 2018年3月21日星期三 UTC+8上午7時30分51秒寫道:

Kathleen Wilson

unread,
Apr 23, 2018, 12:48:42 PM4/23/18
to mozilla-dev-s...@lists.mozilla.org
Here's the summary of the audit reminder email that was sent last
Tuesday, while I was on Spring Break.

Kathleen

-------- Forwarded Message --------
Subject:Summary of April 2018 Audit Reminder Emails
Date: Tue, 17 Apr 2018 19:00:32 +0000 (GMT)
From: Mozilla CA Program Manager <kwi...@mozilla.com>
To: kwi...@mozilla.com <kwi...@mozilla.com>


Mozilla: Audit Reminder
Root Certificates:
GDCA TrustAUTH R5 ROOT
Standard Audit: https://cert.webtrust.org/SealFile?seal=2231&file=pdf
Audit Statement Date: 2017-04-14
BR Audit: https://cert.webtrust.org/SealFile?seal=2232&file=pdf
BR Audit Statement Date: 2017-04-14
EV Audit: https://cert.webtrust.org/SealFile?seal=2233&file=pdf
EV Audit Statement Date: 2017-04-14
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
SZAFIR ROOT CA2**

** Audit Case in the Common CA Database is under review for this root
certificate.

Standard Audit: https://cert.webtrust.org/SealFile?seal=2239&file=pdf
Audit Statement Date: 2017-04-12
BR Audit: https://cert.webtrust.org/SealFile?seal=2239&file=pdf
BR Audit Statement Date: 2017-04-12
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
ComSign CA
Standard Audit:
https://bug1368471.bmoattachments.org/attachment.cgi?id=8872330
Audit Statement Date: 2017-04-26
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
SecureSign RootCA11
Standard Audit: https://cert.webtrust.org/SealFile?seal=2251&file=pdf
Audit Statement Date: 2017-05-10
BR Audit: https://bug1369520.bmoattachments.org/attachment.cgi?id=8873589
BR Audit Statement Date: 2017-05-10
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
Baltimore CyberTrust Root
Cybertrust Global Root
DigiCert Assured ID Root CA
DigiCert Assured ID Root G2
DigiCert Assured ID Root G3
DigiCert High Assurance EV Root CA
DigiCert Trusted Root G4
Standard Audit: https://cert.webtrust.org/SealFile?seal=2228&file=pdf
Audit Statement Date: 2017-04-13
BR Audit: https://cert.webtrust.org/SealFile?seal=2229&file=pdf
BR Audit Statement Date: 2017-04-13
EV Audit: https://cert.webtrust.org/SealFile?seal=2230&file=pdf
EV Audit Statement Date: 2017-04-13
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
SwissSign Platinum CA - G2
SwissSign Silver CA - G2
Standard Audit: https://bugzilla.mozilla.org/attachment.cgi?id=8861552
Audit Statement Date: 2017-03-30
BR Audit: https://bugzilla.mozilla.org/attachment.cgi?id=8861552
BR Audit Statement Date: 2017-03-30
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
Trustis Limited - Trustis FPS Root CA**

** Audit Case in the Common CA Database is under review for this root
certificate.

Standard Audit:
https://bug1360184.bmoattachments.org/attachment.cgi?id=8862399
Audit Statement Date: 2017-03-01
BR Audit: https://bug1360184.bmoattachments.org/attachment.cgi?id=8862399
BR Audit Statement Date: 2017-03-01
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
Amazon Root CA 3**
Amazon Root CA 2**
Starfield Services Root Certificate Authority - G2**
Amazon Root CA 1**
Amazon Root CA 4**

** Audit Case in the Common CA Database is under review for this root
certificate.

Kathleen Wilson

unread,
May 15, 2018, 3:11:30 PM5/15/18
to mozilla-dev-s...@lists.mozilla.org
-------- Forwarded Message --------
Subject: Summary of May 2018 Audit Reminder Emails
Date: Tue, 15 May 2018 19:00:06 +0000 (GMT)


Mozilla: Audit Reminder
Root Certificates:
GDCA TrustAUTH R5 ROOT**

** Audit Case in the Common CA Database is under review for this root
certificate.

Standard Audit: https://cert.webtrust.org/SealFile?seal=2231&file=pdf
Audit Statement Date: 2017-04-14
BR Audit: https://cert.webtrust.org/SealFile?seal=2232&file=pdf
BR Audit Statement Date: 2017-04-14
EV Audit: https://cert.webtrust.org/SealFile?seal=2233&file=pdf
EV Audit Statement Date: 2017-04-14
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
COMODO RSA Certification Authority
USERTrust ECC Certification Authority
AAA Certificate Services
AddTrust Class 1 CA Root
AddTrust External CA Root
COMODO Certification Authority
COMODO ECC Certification Authority
UTN-USERFirst-Client Authentication and Email
USERTrust RSA Certification Authority
Standard Audit: https://cert.webtrust.org/SealFile?seal=2270&file=pdf
Audit Statement Date: 2017-06-02
BR Audit: https://cert.webtrust.org/SealFile?seal=2274&file=pdf
BR Audit Statement Date: 2017-06-02
BR Audit:
BR Audit Statement Date:
EV Audit: https://cert.webtrust.org/SealFile?seal=2272&file=pdf
EV Audit Statement Date: 2017-06-02
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
ComSign CA**

** Audit Case in the Common CA Database is under review for this root
certificate.

Standard Audit:
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
SecureSign RootCA11
Standard Audit: https://cert.webtrust.org/SealFile?seal=2251&file=pdf
Audit Statement Date: 2017-05-10
BR Audit: https://bug1369520.bmoattachments.org/attachment.cgi?id=8873589
BR Audit Statement Date: 2017-05-10
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
Entrust Root Certification Authority - EC1
Entrust Root Certification Authority - G2
AffirmTrust Commercial
AffirmTrust Networking
AffirmTrust Premium
AffirmTrust Premium ECC
Entrust Root Certification Authority
Entrust.net Certification Authority (2048)
Standard Audit: https://cert.webtrust.org/SealFile?seal=2248&file=pdf
Audit Statement Date: 2017-05-17
Standard Audit:
https://www.affirmtrust.com/wp-content/uploads/20170114-20170531-AffirmTrust-WebTrust-for-CA.pdf
Audit Statement Date: 2017-06-12
BR Audit: https://cert.webtrust.org/SealFile?seal=2248&file=pdf
BR Audit Statement Date: 2017-05-17
BR Audit:
https://www.affirmtrust.com/wp-content/uploads/20170114-20170531-AffirmTrust-SSL-Baseline-Requirements..pdf
BR Audit Statement Date: 2017-06-12
EV Audit: https://cert.webtrust.org/SealFile?seal=2248&file=pdf
EV Audit Statement Date: 2017-05-17
EV Audit:
https://www.affirmtrust.com/wp-content/uploads/20170114-20170531-AffirmTrust-WebTrust-for-EV-SSL.pdf
EV Audit Statement Date: 2017-06-12
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
Government Root Certification Authority - Taiwan
Standard Audit: https://cert.webtrust.org/SealFile?seal=2252&file=pdf
Audit Statement Date: 2017-05-24
BR Audit: https://cert.webtrust.org/SealFile?seal=2253&file=pdf
BR Audit Statement Date: 2017-05-24
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
SwissSign Platinum CA - G2
SwissSign Silver CA - G2
Standard Audit: https://bugzilla.mozilla.org/attachment.cgi?id=8861552
Audit Statement Date: 2017-03-30
BR Audit: https://bugzilla.mozilla.org/attachment.cgi?id=8861552
BR Audit Statement Date: 2017-03-30
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
Trustis Limited - Trustis FPS Root CA**

** Audit Case in the Common CA Database is under review for this root
certificate.

Standard Audit:
https://bug1360184.bmoattachments.org/attachment.cgi?id=8862399
Audit Statement Date: 2017-03-01
BR Audit: https://bug1360184.bmoattachments.org/attachment.cgi?id=8862399
BR Audit Statement Date: 2017-03-01
CA Comments: https://bugzilla.mozilla.org/show_bug.cgi?id=1360184#c10

____


Kathleen Wilson

unread,
Jun 19, 2018, 5:00:06 PM6/19/18
to mozilla-dev-s...@lists.mozilla.org
-------- Forwarded Message --------
Subject: Summary of June 2018 Audit Reminder Emails
Date: Tue, 19 Jun 2018 19:00:17 +0000 (GMT)


Mozilla: Audit Reminder
Root Certificates:
Atos TrustedRoot 2011
Standard Audit:
https://www.mydqs.com/kunden/kundendatenbank.html?aoemydqs%5BrequestId%5D=europev2-DQS-00DCD7AE71E211E7B653005056A04F41-_v2&aoemydqs%5BdownloadKey%5D=91bdb1288df96a7e719d7ebcad82dc822d5b1a65&aoemydqs%5Baction%5D=downloadDocument&cHash=f4c93332780df1788265
Audit Statement Date: 2017-06-14
BR Audit:
https://www.mydqs.com/kunden/kundendatenbank.html?aoemydqs%5BrequestId%5D=europev2-DQS-00DCD7AE71E211E7B653005056A04F41-_v2&aoemydqs%5BdownloadKey%5D=91bdb1288df96a7e719d7ebcad82dc822d5b1a65&aoemydqs%5Baction%5D=downloadDocument&cHash=f4c93332780df1788265
BR Audit Statement Date: 2017-06-14
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
Chambers of Commerce Root
Chambers of Commerce Root - 2008
Global Chambersign Root
Global Chambersign Root - 2008
Standard Audit: https://cert.webtrust.org/SealFile?seal=2283&file=pdf
Audit Statement Date: 2017-07-10
BR Audit: https://cert.webtrust.org/SealFile?seal=2284&file=pdf
BR Audit Statement Date: 2017-07-10
EV Audit: https://cert.webtrust.org/SealFile?seal=2285&file=pdf
EV Audit Statement Date: 2017-07-10
Government Root Certification Authority - Taiwan
Standard Audit: https://cert.webtrust.org/SealFile?seal=2252&file=pdf
Audit Statement Date: 2017-05-24
BR Audit: https://cert.webtrust.org/SealFile?seal=2253&file=pdf
BR Audit Statement Date: 2017-05-24
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
Hellenic Academic and Research Institutions RootCA 2011
Hellenic Academic and Research Institutions ECC RootCA 2015
Hellenic Academic and Research Institutions RootCA 2015
Standard Audit:
https://www.harica.gr/documents/HARICA-ETSI_CERTIFICATE_AUTH_W_ANNEX_290617-7.pdf
Audit Statement Date: 2017-06-29
BR Audit:
https://www.harica.gr/documents/HARICA-ETSI_CERTIFICATE_AUTH_W_ANNEX_290617-7.pdf
BR Audit Statement Date: 2017-06-29
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
SwissSign Platinum CA - G2
SwissSign Silver CA - G2
Standard Audit: https://bugzilla.mozilla.org/attachment.cgi?id=8861552
Audit Statement Date: 2017-03-30
BR Audit: https://bugzilla.mozilla.org/attachment.cgi?id=8861552
BR Audit Statement Date: 2017-03-30
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
Sonera Class2 CA
TeliaSonera Root CA v1
Standard Audit:
https://support.partnergate.sonera.com/download/CA/WebTrust-Audit-Report-2017-06-30.pdf
Audit Statement Date: 2017-06-30
BR Audit:
https://support.partnergate.sonera.com/download/CA/WebTrust-BR-Audit-Report-2017-06-30.pdf
BR Audit Statement Date: 2017-06-30
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
Deutsche Telekom Root CA 2
T-TeleSec GlobalRoot Class 2
T-TeleSec GlobalRoot Class 3
Standard Audit:
https://www.tuvit.de/fileadmin/Content/TUV_IT/zertifikate/de/Browser_Audit_Attestation_2017_V2.2_s.pdf
Audit Statement Date: 2017-06-30
BR Audit:
https://www.tuvit.de/fileadmin/Content/TUV_IT/zertifikate/en/6760UE_s.pdf
BR Audit Statement Date: 2017-07-31
BR Audit:
https://www.tuvit.de/fileadmin/Content/TUV_IT/zertifikate/en/6761UE_s.pdf
BR Audit Statement Date: 2017-07-31
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
Certum Trusted Network CA 2
Certum CA
Certum Trusted Network CA
Standard Audit: https://cert.webtrust.org/SealFile?seal=2301&file=pdf
Audit Statement Date: 2017-07-05
BR Audit: https://cert.webtrust.org/SealFile?seal=2298&file=pdf
BR Audit Statement Date: 2017-08-05
EV Audit: https://cert.webtrust.org/SealFile?seal=2296&file=pdf
EV Audit Statement Date: 2017-07-05
CA Comments: null

____


Kurt Roeckx

unread,
Jun 19, 2018, 5:06:40 PM6/19/18
to Kathleen Wilson, mozilla-dev-s...@lists.mozilla.org
On Tue, Jun 19, 2018 at 01:59:26PM -0700, Kathleen Wilson via dev-security-policy wrote:
>
> Mozilla: Audit Reminder
> Root Certificates:
> SwissSign Platinum CA - G2
> SwissSign Silver CA - G2
> Standard Audit: https://bugzilla.mozilla.org/attachment.cgi?id=8861552
> Audit Statement Date: 2017-03-30
> BR Audit: https://bugzilla.mozilla.org/attachment.cgi?id=8861552
> BR Audit Statement Date: 2017-03-30
> CA Comments: null

This was a point in time audit on 2017-03-08. They should have a
new report by now.


Kurt

Kathleen Wilson

unread,
Jul 17, 2018, 7:06:45 PM7/17/18
to mozilla-dev-s...@lists.mozilla.org
-------- Forwarded Message --------
Subject: Summary of July 2018 Audit Reminder Emails
Date: Tue, 17 Jul 2018 19:00:10 +0000 (GMT)

Mozilla: Audit Reminder
Root Certificates:
LuxTrust Global Root 2
Standard Audit:
https://www.luxtrust.lu/upload/data/repository/attestation_letter_luxtrust_2017_s.pdf
Audit Statement Date: 2017-07-24
BR Audit:
https://www.luxtrust.lu/upload/data/repository/attestation_letter_luxtrust_2017_s.pdf
BR Audit Statement Date: 2017-07-24
EV Audit:
https://www.luxtrust.lu/upload/data/repository/attestation_letter_luxtrust_2017_s.pdf
EV Audit Statement Date: 2017-07-24
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
Mozilla: Audit Reminder
Root Certificates:
Chambers of Commerce Root
Chambers of Commerce Root - 2008
Global Chambersign Root
Global Chambersign Root - 2008
Standard Audit: https://cert.webtrust.org/SealFile?seal=2283&file=pdf
Audit Statement Date: 2017-07-10
BR Audit: https://cert.webtrust.org/SealFile?seal=2284&file=pdf
BR Audit Statement Date: 2017-07-10
EV Audit: https://cert.webtrust.org/SealFile?seal=2285&file=pdf
EV Audit Statement Date: 2017-07-10
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
AC Raíz Certicámara S.A.
Standard Audit: https://cert.webtrust.org/SealFile?seal=2333&file=pdf
Audit Statement Date: 2017-08-09
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
Certinomis - Root CA
Standard Audit:
https://bug937589.bmoattachments.org/attachment.cgi?id=8898169
Audit Statement Date: 2017-07-24
BR Audit: https://bug937589.bmoattachments.org/attachment.cgi?id=8898169
BR Audit Statement Date: 2017-07-24
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
COMODO RSA Certification Authority
USERTrust ECC Certification Authority
AAA Certificate Services
AddTrust Class 1 CA Root
AddTrust External CA Root
COMODO Certification Authority
COMODO ECC Certification Authority
UTN-USERFirst-Client Authentication and Email
USERTrust RSA Certification Authority
Standard Audit: https://cert.webtrust.org/SealFile?seal=2270&file=pdf
Audit Statement Date: 2017-06-02
BR Audit: https://cert.webtrust.org/SealFile?seal=2274&file=pdf
BR Audit Statement Date: 2017-06-02
BR Audit:
BR Audit Statement Date:
EV Audit: https://cert.webtrust.org/SealFile?seal=2272&file=pdf
EV Audit Statement Date: 2017-06-02
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
GlobalSign
GlobalSign
GlobalSign Root CA
GlobalSign Extended Validation CA - SHA256 - G2
Standard Audit: https://cert.webtrust.org/SealFile?seal=2287&file=pdf
Audit Statement Date: 2017-07-26
BR Audit: https://cert.webtrust.org/SealFile?seal=2338&file=pdf
BR Audit Statement Date: 2017-09-22
EV Audit: https://cert.webtrust.org/SealFile?seal=2288&file=pdf
EV Audit Statement Date: 2017-07-26
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
ACCVRAIZ1
Standard Audit: https://cert.webtrust.org/SealFile?seal=2299&file=pdf
Audit Statement Date: 2017-07-28
BR Audit: https://cert.webtrust.org/SealFile?seal=2300&file=pdf
BR Audit Statement Date: 2017-07-28
CA Comments: Per CA request, Root CA Generalitat Valenciana will be
removed via https://bugzilla.mozilla.org/show_bug.cgi?id=1272158

____

Mozilla: Audit Reminder
Root Certificates:
Izenpe.com
Standard Audit:
http://www.izenpe.eus/contenidos/informacion/auditorias_acreditaciones/en_def/adjuntos/6757_Izenpe_Browser_Attestation_2017.pdf
Audit Statement Date: 2017-07-25
BR Audit:
http://www.izenpe.eus/contenidos/informacion/auditorias_acreditaciones/en_def/adjuntos/6757_Izenpe_Browser_Attestation_2017.pdf
BR Audit Statement Date: 2017-07-25
EV Audit:
http://www.izenpe.eus/contenidos/informacion/auditorias_acreditaciones/en_def/adjuntos/6757_Izenpe_Browser_Attestation_2017.pdf
EV Audit Statement Date: 2017-07-25
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
OpenTrust Root CA G1
OpenTrust Root CA G2
Certplus Root CA G1
Class 2 Primary CA
OpenTrust Root CA G3
Certplus Root CA G2
Standard Audit:
https://bug1297034.bmoattachments.org/attachment.cgi?id=8916590
Audit Statement Date: 2017-07-24
BR Audit: https://bug1297034.bmoattachments.org/attachment.cgi?id=8916590
BR Audit Statement Date: 2017-07-24
EV Audit: https://bug1297034.bmoattachments.org/attachment.cgi?id=8916590
EV Audit Statement Date: 2017-07-24
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
SwissSign Platinum CA - G2
SwissSign Silver CA - G2
Standard Audit: https://bugzilla.mozilla.org/attachment.cgi?id=8861552
Audit Statement Date: 2017-03-30
BR Audit: https://bugzilla.mozilla.org/attachment.cgi?id=8861552
BR Audit Statement Date: 2017-03-30
CA Comments: https://bugzilla.mozilla.org/show_bug.cgi?id=1374381

____

Mozilla: Audit Reminder
Root Certificates:
Sonera Class2 CA**
TeliaSonera Root CA v1**

** Audit Case in the Common CA Database is under review for this root
certificate.

Standard Audit:
Mozilla: Audit Reminder
Root Certificates:
Deutsche Telekom Root CA 2
T-TeleSec GlobalRoot Class 2
T-TeleSec GlobalRoot Class 3
Standard Audit:
https://www.tuvit.de/fileadmin/Content/TUV_IT/zertifikate/de/Browser_Audit_Attestation_2017_V2.2_s.pdf
Audit Statement Date: 2017-06-30
BR Audit:
https://www.tuvit.de/fileadmin/Content/TUV_IT/zertifikate/en/6760UE_s.pdf
BR Audit Statement Date: 2017-07-31
BR Audit:
https://www.tuvit.de/fileadmin/Content/TUV_IT/zertifikate/en/6761UE_s.pdf
BR Audit Statement Date: 2017-07-31
EV Audit:
https://www.tuvit.de/fileadmin/Content/TUV_IT/zertifikate/en/6761UE_s.pdf
EV Audit Statement Date: 2017-07-31
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
Certum Trusted Network CA 2
Certum CA
Certum Trusted Network CA
Standard Audit: https://cert.webtrust.org/SealFile?seal=2301&file=pdf
Audit Statement Date: 2017-07-05
BR Audit: https://cert.webtrust.org/SealFile?seal=2298&file=pdf
BR Audit Statement Date: 2017-08-05
EV Audit: https://cert.webtrust.org/SealFile?seal=2296&file=pdf
EV Audit Statement Date: 2017-07-05
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
Visa eCommerce Root
Standard Audit: http://enroll.visaca.com/WTCA%20eComm.pdf
Audit Statement Date: 2017-07-26
BR Audit: http://enroll.visaca.com/WTBR%20eComm.pdf
BR Audit Statement Date: 2017-07-26
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
Network Solutions Certificate Authority
Standard Audit: https://cert.webtrust.org/SealFile?seal=2290&file=pdf
Audit Statement Date: 2017-07-21
BR Audit: https://cert.webtrust.org/SealFile?seal=2291&file=pdf
BR Audit Statement Date: 2017-07-21
EV Audit: https://cert.webtrust.org/SealFile?seal=2292&file=pdf
EV Audit Statement Date: 2017-07-21
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
OISTE WISeKey Global Root GB CA
OISTE WISeKey Global Root GA CA
Standard Audit: https://cert.webtrust.org/SealFile?seal=2293&file=pdf
Audit Statement Date: 2017-07-28
BR Audit: https://cert.webtrust.org/SealFile?seal=2294&file=pdf
BR Audit Statement Date: 2017-07-28
EV Audit: https://cert.webtrust.org/SealFile?seal=2295&file=pdf
EV Audit Statement Date: 2017-07-28
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
SSL.com EV Root Certification Authority ECC
SSL.com Root Certification Authority ECC
SSL.com Root Certification Authority RSA
SSL.com EV Root Certification Authority RSA R2
Standard Audit:
https://www.ssl.com/app/uploads/2017/07/SSL-COM-WTCA-Indp-Accountant-Report-and-Mgmt-Assertion-FINAL-2017.pdf
Audit Statement Date: 2017-07-27
BR Audit:
https://www.ssl.com/app/uploads/2017/07/SSL-COM-WTBR-Indp-Accountant-Report-and-Mgmt-Assertion-FINAL-2017.pdf
BR Audit Statement Date: 2017-07-27
EV Audit: https://cert.webtrust.org/SealFile?seal=2286&file=pdf
EV Audit Statement Date: 2017-07-27
CA Comments: null

____


Kathleen Wilson

unread,
Aug 21, 2018, 3:04:19 PM8/21/18
to mozilla-dev-s...@lists.mozilla.org
-------- Forwarded Message --------
Subject: Summary of August 2018 Audit Reminder Emails
Date: Tue, 21 Aug 2018 19:00:10 +0000 (GMT)

Mozilla: Audit Reminder
Root Certificates:
AC Raíz Certicámara S.A.
Standard Audit: https://cert.webtrust.org/SealFile?seal=2333&file=pdf
Audit Statement Date: 2017-08-09
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
Certinomis - Root CA
Standard Audit:
https://bug937589.bmoattachments.org/attachment.cgi?id=8898169
Audit Statement Date: 2017-07-24
BR Audit: https://bug937589.bmoattachments.org/attachment.cgi?id=8898169
BR Audit Statement Date: 2017-07-24
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
E-Tugra Certification Authority
Standard Audit:
https://www.e-tugra.com.tr/Portals/6/Documents/LSTIAL_ETugra_2017.pdf
Audit Statement Date: 2017-09-09
BR Audit:
https://www.e-tugra.com.tr/Portals/6/Documents/LSTIAL_ETugra_2017.pdf
BR Audit Statement Date: 2017-09-09
EV Audit:
https://www.e-tugra.com.tr/Portals/6/Documents/LSTIAL_ETugra_2017.pdf
EV Audit Statement Date: 2017-09-09
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
Go Daddy Class 2 CA
Go Daddy Root Certificate Authority - G2
Starfield Class 2 CA
Starfield Root Certificate Authority - G2
Standard Audit: https://cert.webtrust.org/SealFile?seal=2332&file=pdf
Audit Statement Date: 2017-08-31
BR Audit: https://cert.webtrust.org/SealFile?seal=2332&file=pdf
BR Audit Statement Date: 2017-08-31
EV Audit: https://cert.webtrust.org/SealFile?seal=2332&file=pdf
EV Audit Statement Date: 2017-08-31
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
ACCVRAIZ1
Standard Audit: https://cert.webtrust.org/SealFile?seal=2299&file=pdf
Audit Statement Date: 2017-07-28
BR Audit: https://cert.webtrust.org/SealFile?seal=2300&file=pdf
BR Audit Statement Date: 2017-07-28
CA Comments: Per CA request, Root CA Generalitat Valenciana will be
removed via https://bugzilla.mozilla.org/show_bug.cgi?id=1272158

____

Mozilla: Audit Reminder
Root Certificates:
IdenTrust Commercial Root CA 1**
IdenTrust Public Sector Root CA 1**
DST Root CA X3**

** Audit Case in the Common CA Database is under review for this root
certificate.

Standard Audit: https://cert.webtrust.org/SealFile?seal=2331&file=pdf
Audit Statement Date: 2017-08-31
BR Audit: https://cert.webtrust.org/SealFile?seal=2334&file=pdf
BR Audit Statement Date: 2017-09-18
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
SECOM Trust.net - Security Communication RootCA1
Security Communication RootCA2
Standard Audit: https://cert.webtrust.org/SealFile?seal=2321&file=pdf
Audit Statement Date: 2017-08-31
BR Audit: https://cert.webtrust.org/SealFile?seal=2323&file=pdf
BR Audit Statement Date: 2017-08-31
EV Audit: https://cert.webtrust.org/SealFile?seal=2322&file=pdf
EV Audit Statement Date: 2017-08-31
CA Comments: null

____

Mozilla: Overdue Audit Statements
Root Certificates:
SwissSign Platinum CA - G2**

** Audit Case in the Common CA Database is under review for this root
certificate.

Standard Audit: https://bugzilla.mozilla.org/attachment.cgi?id=8861552
Audit Statement Date: 2017-03-30
BR Audit: https://bugzilla.mozilla.org/attachment.cgi?id=8861552
BR Audit Statement Date: 2017-03-30
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:
Visa eCommerce Root
Standard Audit: http://enroll.visaca.com/WTCA%20eComm.pdf
Audit Statement Date: 2017-07-26
BR Audit: http://enroll.visaca.com/WTBR%20eComm.pdf
BR Audit Statement Date: 2017-07-26
CA Comments: null

____

Mozilla: Audit Reminder
Root Certificates:

Kurt Roeckx

unread,
Aug 22, 2018, 4:32:25 AM8/22/18
to mozilla-dev-s...@lists.mozilla.org
On 2018-08-21 21:03, Kathleen Wilson wrote:
> Mozilla: Overdue Audit Statements
> Root Certificates:
>    SwissSign Platinum CA - G2**
>
> ** Audit Case in the Common CA Database is under review for this root
> certificate.
>
> Standard Audit: https://bugzilla.mozilla.org/attachment.cgi?id=8861552
> Audit Statement Date: 2017-03-30
> BR Audit: https://bugzilla.mozilla.org/attachment.cgi?id=8861552
> BR Audit Statement Date: 2017-03-30
> CA Comments: null

Is this not properly marked in the database?

I found https://bugzilla.mozilla.org/show_bug.cgi?id=1374381, which
seems to be related to it, and was closed.

The linked audits there:
- For one claiming the period covering 2015: The statement does not
state which period was covered.
- For one claiming the period covering 2016: The statement does not
state which period was covered. A previous report from the auditor for
that period stated that it was a point in time audit.
The changed report removed this sentence: "KPMG has performed a point in
time audit. The reference date is 8 March 2017." and replaced
"We were not engaged to and did not conduct an examination, the object
of which would be the expression of an opinion on the Application for
Extended Validation (EV) Certificate. Accordingly, we do not express
such an opinion. Had we performed additional procedures, other matters
might have come to our attention that would have been reported to you"
with:
"KPMG has assessed the architecture, operation and procedures on a
sample approach although we have not assessed every configuration
setting on technical devices."
- The report from a new auditor covered the period: March, 9th 2017
until June, 6th 2018, which is longer than 1 year.


Kurt

Wayne Thayer

unread,
Aug 22, 2018, 9:40:15 PM8/22/18
to Kurt Roeckx, mozilla-dev-security-policy
Kurt,

Thank your for raising this issue.

As documented in the bug you referenced, there was a good deal of confusion
about Mozilla's acceptance (or not) of SwissSign's 2017 audit statements.
Mozilla rejected the first statements and then asked questions about the
second set of statements but never clearly rejected them.

A verbal agreement was reached that SwissSign would obtain new audits, but
it resulted in only one of their 3 included roots being re-audited later in
2017. Given the lack of documentation, I am willing to accept that as a
misunderstanding of scope between Mozilla and SwissSign. The result is that
we have 2017 audit statements in CCADB that are marked as having been
accepted despite the significant concerns that were raised in the bug you
referenced.

I believe the fact that the audit period extended for more than a year was
caused by SwissSign's (understandable) decision to use a different auditor
this year. However, I agree that this is a problem because it directly
contradicts BR section 8.1 which states "An audit period MUST NOT exceed
one year in duration" and Mozilla's requirement that "Full-surveillance
period-of-time audits MUST be conducted and updated audit information
provided no less frequently than annually". I believe these new audit
statements (both for the Platinum and Silver roots) should be rejected on
that basis, and I would also welcome a response from SwissSign and/or their
auditors. In addition, Kathleen is researching why this was not flagged by
CCADB when the audit cases were processed.

When choosing to switch auditors for 2018, SwissSign asked Mozilla to
permit them to use TUV Austria prior to the firm's formal eIDAS
accreditation. Given that the individuals performing the audits were
well-known as auditors for TUV Germany who moved to the Austrian entity,
Mozilla agreed to this exception as permitted under Root Store Policy
section 3.2. TUV Austria has since informed us that they have received
their accreditation.

Finally, the audit submitted for the (not yet included) SwissSign Silver G3
root is point-in-time, and thus not acceptable as documented in
https://bugzilla.mozilla.org/show_bug.cgi?id=1142323#c44 I have discussed
this with SwissSign's auditors, and their belief was that a point-in-time
report is appropriate when no certificates have been issued from a root
during the period. I do not agree with this interpretation and plan to have
further discussions with ETSI folks on this topic (WebTrust has already
confirmed that it is possible report on a root over a period-of-time even
when no issuance has occurred). Meanwhile, I believe that TUV Austria may
reissue the reports for this root as period-of-time since the audits
themselves covered the entire period.

- Wayne

On Wed, Aug 22, 2018 at 1:32 AM Kurt Roeckx via dev-security-policy <
dev-secur...@lists.mozilla.org> wrote:

> On 2018-08-21 21:03, Kathleen Wilson wrote:
> > Mozilla: Overdue Audit Statements
> > Root Certificates:
> > SwissSign Platinum CA - G2**
> >
> > ** Audit Case in the Common CA Database is under review for this root
> > certificate.
> >
> > Standard Audit: https://bugzilla.mozilla.org/attachment.cgi?id=8861552
> > Audit Statement Date: 2017-03-30
> > BR Audit: https://bugzilla.mozilla.org/attachment.cgi?id=8861552
> > BR Audit Statement Date: 2017-03-30
> > CA Comments: null
>
> Is this not properly marked in the database?
>
> I found https://bugzilla.mozilla.org/show_bug.cgi?id=1374381, which
> seems to be related to it, and was closed.
>
> The linked audits there:
> - For one claiming the period covering 2015: The statement does not
> state which period was covered.
> - For one claiming the period covering 2016: The statement does not
> state which period was covered. A previous report from the auditor for
> that period stated that it was a point in time audit.
> The changed report removed this sentence: "KPMG has performed a point in
> time audit. The reference date is 8 March 2017." and replaced
> "We were not engaged to and did not conduct an examination, the object
> of which would be the expression of an opinion on the Application for
> Extended Validation (EV) Certificate. Accordingly, we do not express
> such an opinion. Had we performed additional procedures, other matters
> might have come to our attention that would have been reported to you"
> with:
> "KPMG has assessed the architecture, operation and procedures on a
> sample approach although we have not assessed every configuration
> setting on technical devices."
> - The report from a new auditor covered the period: March, 9th 2017
> until June, 6th 2018, which is longer than 1 year.
>
>
> Kurt
> _______________________________________________
> dev-security-policy mailing list
> dev-secur...@lists.mozilla.org
> https://lists.mozilla.org/listinfo/dev-security-policy
>

bloedsin...@gmail.com

unread,
Aug 27, 2018, 2:25:38 AM8/27/18
to mozilla-dev-s...@lists.mozilla.org
Dear all

This is a joint answer to Waynes' request.

it was mentioned that the audit period was exceeded. We would like to explain the situation and what was undertaken to avoid such situation again.

We all are aware that the audit period was exceeded by two months. However the conducted audit from April 2018 also covers the 2 months extension. As you already mentioned, the reason is that SwissSign decided to change the auditors after 12 years for quality assurance reason. Additionally, it is a best practice within the IT security world or the financial sector to change the external auditors on a regular base.
During the process, SwissSign defined some criteria in order to choose the new auditors these are:

The auditors shall:
- possess a knowledge and experience since years performing PKI audits as a full time job.

- have experience in auditing different international CA which are also included in the Root Stores.

- take their time to understand in detail the processes, infrastructure, implementations, etc. of SwissSign.
- support SwissSign being conform over time between the annual audits, e.g. by pre-assessments of new solutions/processes/applications before these are going in live production.
- be well known in the community.
- be active in international and national working groups in order to keep their knowledge about requirements up-to-date.
- are /going to be accredited to perform audit according the relevant standards.
- Fullfills requirement according to BR 8.2 and BR 8.3


The whole process took its time because of the complexity of such a change. At the end, SwissSign decided to work together with the qualified auditors from TÜV Austria which will perform all audits for all PKI in the future. The upcoming audit for the Silver and Platinum PKI was performed as soon as the contract was agreed and signed.
We would also like to point out that both PKI are maintained under exact the same physical, technical, organizational and logical conditions and measures as the Gold PKI which is was audited in October 2017. Additionally, the Platinum PKI is also audited according the Swiss Law on an annual base.

In order to avoid such exceeding, the contract with the auditors was signed for the next several years, in order to ensure that the audits are planned and performed in time as required by the CA/B Forum and the Browser Root CA Policies. It is already planned that in September 2018 a new full audit for all PKI (Silver, Platinum and Gold G2 and G3) will be performed. After the audit for all three PKI, completely new audit attestations will be issued covering the period until the last audit day. This will be the start point for a full annual audit for all PKI together so that there is not any timely separation between them. Additionally, the audits for the next years are already planned, so that an exceeding of the audit period will be prevented.


We hope that this sheds some lights on the situation.

Thanks and kindest regards

Reinhard Dietrich