Consorci AOC: Qualified audit statements

This case involves Consorci AOC's submission of qualified audit statements, which revealed several compliance issues, including late delivery of audit reports and the presence of suspended certificates in the CRL. The CA provided a corrective action plan to address these findings, and subsequent communications confirmed that remediation efforts were underway. As of January 2020, Consorci AOC ceased issuing TLS certificates from all subCAs signed by the EC-ACC root, with plans to migrate to a new hierarchy for future certificate issuance. The case is now resolved.

1. 2019-12-27 Consorci AOC stopped issuing TLS certificates from all subCAs signed by the EC-ACC root.

1. 2018-10-04 Fastly representative — Consorci's latest audit statements revealed multiple compliance issues.
2. 2019-01-02 Consorci Administració Oberta de Catalunya (Consorci AOC, CATCert) — Consorci AOC provided an interim report addressing some audit findings.
3. 2019-06-17 Consorci Administració Oberta de Catalunya (Consorci AOC, CATCert) — Consorci AOC submitted additional audit documentation.
4. 2020-01-22 Consorci Administració Oberta de Catalunya (Consorci AOC, CATCert) — Confirmed that TLS certificate issuance ceased as of December 27, 2019.
5. 2020-03-09 Mozilla representative — Filed a bug to process distrust for certificates issued after December 27, 2019.