FNMT: Findings in 2019 Audit Statement, including domain validation methods, CAA, etc.

This case tracks the resolution of findings identified in the 2019 audit of the Government of Spain's CA, FNMT. The audit revealed issues with domain validation methods, including inadequate checks and reliance on outdated information. FNMT acknowledged these findings and provided a timeline of corrective actions, including the elimination of non-compliant validation methods and the implementation of new controls for domain validation and CAA record checks. The CA has since completed the revalidation of affected certificates and updated its procedures to ensure compliance with Mozilla's policies.

1. 2019-04-15 Audit findings reported regarding domain validation and CAA compliance.
2. 2019-06-06 Revalidation of all affected certificates completed.

1. 2019-04-15 Mozilla representative — This bug is to track resolution to the items that were identified as 'findings' in this CA's 2019 audit statement.
2. 2019-04-16 Government of Spain, Fábrica Nacional de Moneda y Timbre (FNMT) — FNMT became aware of the problem via the periodic Audit conducted between January 21st and February 6th, 2019.
3. 2019-06-06 Government of Spain, Fábrica Nacional de Moneda y Timbre (FNMT) — We have been able to complete the revalidation for all the 20 certificates affected.
4. 2019-08-11 Fastly representative — It appears that all questions have been answered and remediation is complete.