Audit info for Consorci AOC, CATCert
This case provides audit information for Consorci Administració Oberta de Catalunya (Consorci AOC, CATCert). The bug was created with attachments for qualified WebTrust audit reports for AOC covering 2015–2016 for both BR and EV. Kathleen Wilson (from the CA) responded that most non-conformities were associated with the certificate profile and that they had been solved since around June 2016. She also discussed other issues, including SAN contents, coding requirements (e.g., jurisdictionOfIncorporation), and plans to migrate from EJBCA Community Edition to EJBCA Enterprise Edition to enable features such as OCSP whitelist and Certificate Transparency. She indicated that the bug was being closed, but that it may continue to be used for audit statements for this CA. The bug is currently marked RESOLVED with resolution WORKSFORME, and it was later noted that Bug 1385119 was marked as a duplicate of this bug.
- CA Program bug created with attachments for qualified WebTrust BR and EV audit reports for Consorci AOC, CATCert covering 2015–2016.
- CA provided responses about non-conformities and remediation status, and discussed related technical/audit topics.
- Bug was closed by the CA with intent to reuse it for future audit statements.
- A later comment stated that Bug 1385119 was marked as a duplicate of this bug.
- Microsoft Corporation — Created attachments for qualified WebTrust BR and EV audit reports for AOC 2015–2016.
- Mozilla representative — Explained that most non-conformities were tied to the certificate profile and said they were solved since around June 2016, and discussed additional audit-related issues and planned migration steps.
- Mozilla representative — Closed the bug, noting it may continue to be used for audit statements for this CA.
- Mozilla representative — Noted that Bug 1385119 was marked as a duplicate of this bug.