DocuSign/Keynectis: Missing BR Self Assessment
Mozilla requested that CAs complete a BR Self Assessment by January 31, 2018, and later extended the deadline to April 15 in the January 2018 CA Communication. In this case, DocuSign/Keynectis responded with questions about how to complete the self assessment and indicated it would be delivered before April 15, but Mozilla noted that no BR Self Assessment had been received. Mozilla asked for a near-term delivery date, an explanation for why the deadline was missed and why Mozilla was not notified, and steps to prevent recurrence. The thread also notes that the BR self-assessment needed to be completed for the Certplus Class 2 Primary CA to remain in the Mozilla program with the websites trust bit enabled until 2019 as requested in bug 1465629. The issue was later resolved because Docusign/Keynectis would cease to be a member of the Mozilla program in July as a result of bug 1465629. The bug is marked RESOLVED with resolution WONTFIX.
- Mozilla required BR Self Assessments from CAs by January 31, 2018 (later extended to April 15).
- The extended deadline for DocuSign/Keynectis to submit its BR Self Assessment passed without submission.
- Mozilla resolved the case because DocuSign/Keynectis would leave the Mozilla program in July per bug 1465629.
- Community commenter — DocuSign/Keynectis asked how to scope the BR self assessment and stated it intended to deliver it before April 15, but Mozilla reported that no BR self assessment had been received and requested a delivery date, reasons for the missed deadline, and prevention steps.
- Community commenter — The thread states the BR self-assessment also needed to be completed for the Certplus Class 2 Primary CA to remain with the websites trust bit enabled until 2019 as requested in bug 1465629.
- Community commenter — The case was resolved because Docusign/Keynectis would cease to be a member of the Mozilla program in July as a result of bug 1465629.