FNMT: Findings in 2019 Audit Statement, including domain validation methods, CAA, etc.

The case addresses findings from the 2019 audit of the Government of Spain's FNMT. Key issues included inadequate domain ownership checks and insufficient controls over certificate issuance processes. FNMT acknowledged these issues and has since implemented corrective measures, including the elimination of non-compliant validation methods and the establishment of new procedures for domain validation and CAA record checks. The audit findings prompted a comprehensive review of their practices to ensure compliance with Mozilla's policies and the Baseline Requirements.

1. 2019-04-15 Bug created to track audit findings.
2. 2019-06-06 Revalidation of affected certificates completed.
3. 2019-08-11 Remediation confirmed complete.