Audit information and annual audit document uploads for SSL.com
This case is a CA Documents matter used to collect audit-related materials for SSL.com. It was opened in 2017 by a Microsoft participant who uploaded several SSL.com audit reports and management assertions, and Mozilla staff noted that the same reports were also available on SSL.com's website. The thread was explicitly described as a place that could continue to be used for uploading annual audit statements for this CA. SSL.com later added additional audit documents in 2020, 2021, 2022, and again in September 2026. The 2021 and 2022 uploads included auditor qualifications attachments, and Mozilla staff added additional enterprise key lifecycle and key generation audit materials in 2022. The new 2026 activity consists of many uploaded attachments labeled as WebTrust tables, management assertions and CA scope tables, and working draft reports dated 2026-06-30. The bug remains resolved with resolution WORKSFORME, and the thread shows document collection activity rather than a stated compliance dispute or incident investigation.
- Initial SSL.com audit reports and management assertions were uploaded to the case.
- Additional 2020 SSL.com audit opinion and management assertion documents were uploaded.
- 2021 auditor opinion documents were uploaded for multiple SSL.com audit scopes.
- 2021 final audit opinion and management assertion documents, including auditor qualifications, were uploaded.
- 2022 audit opinion and management assertion documents, including auditor qualifications, were uploaded.
- Additional enterprise key lifecycle and key generation audit materials were uploaded.
- SSL.com uploaded WebTrust tables and management assertion/CA scope table documents.
- SSL.com uploaded working draft audit reports dated 2026-06-30.
- Microsoft Corporation — Opened the bug and uploaded several SSL.com audit report and management assertion attachments.
- Mozilla representative — Said the reports were also available on SSL.com's website, stated a preference for linking to audit statements from public sites, and said the bug could continue to be used for annual audit uploads.
- SSL.com — Uploaded multiple 2020 audit opinion and management assertion attachments.
- SSL.com — Uploaded 2021 auditor opinion attachments for several audit scopes.
- SSL.com — Uploaded final 2021 audit opinion and management assertion documents and an auditor qualifications attachment.
- SSL.com — Uploaded 2022 audit opinion and management assertion documents and an auditor qualifications attachment.
- Mozilla representative — Uploaded additional enterprise key lifecycle and key generation audit-related attachments.
- SSL.com — Uploaded multiple WebTrust tables and management assertion/CA scope table attachments.
- SSL.com — Uploaded several working draft audit report attachments dated 2026-06-30.