Firmaprofesional: 2019 Audit Report Findings

This case addresses the findings from the 2019 audit of Firmaprofesional, focusing on issues related to identification and authorization, operational controls, and certificate profiles. The audit revealed that revocation requests were not properly documented, and auditors lacked access to necessary logs. Additionally, there were concerns regarding the entropy of SSL certificates issued by the CA. The CA has since worked on incident reports and updates to resolve these findings, with related bugs being closed as issues were addressed.

1. 2019-12-30 Audit findings documented and tracked.
2. 2020-01-06 CA began creating incident reports.
3. 2020-01-13 Updates provided on resolving findings.
4. 2020-05-22 All related findings confirmed resolved.