Telia: Qualified Audit Statements

This case involves Telia Company providing qualified audit statements for 2018, which included several qualifications related to compliance issues. The CA was required to submit incident reports for documented misissuances and to take corrective actions for various audit issues. Telia committed to conducting point-in-time audits and periodic audits to ensure compliance. The point-in-time audit was completed by October 31, 2018, and the results indicated one remaining issue regarding the root CA certificate format. Telia has since created a new compliant root CA and is seeking permission to submit it for inclusion in Mozilla's root store. The case is now resolved with Telia's commitment to ongoing compliance.

1. 2018-07-12 Telia submitted 2018 audit statements with qualifications.
2. 2019-01-30 Telia completed the point-in-time audit.
3. 2019-02-06 Mozilla confirmed remediation of issues and allowed Telia to proceed with new root submission.

1. 2018-07-12 Fastly representative — Telia has supplied the following 2018 audit statements.
2. 2018-08-03 Teliasonera representative — Incident reports are now in mozilla.dev.security.policy forum.
3. 2018-09-04 Fastly representative — Mozilla will accept the following as remediation for the audit issues.
4. 2019-01-30 Teliasonera representative — Now the required extra Telia PIT Audit statements are ready.
5. 2019-02-06 Fastly representative — I have reviewed the point-in-time audit statements and confirmed that they do not list any existing or new qualifications.