GRCA: ALV failures on intermediate certificates

This case involves the Government Root Certification Authority (GRCA) addressing Audit Letter Validation (ALV) failures for several of its intermediate certificates. The issue was triggered by GRCA's response to Mozilla's January 2020 CA Communication survey, which indicated no audit issues, despite ALV reporting failures. The CA engaged its auditor, KPMG, to rectify formatting problems in audit statements and committed to resolving the identified issues. The CA subsequently provided updated audit statements, which included the previously missing certificates. The case was resolved after confirming that the updated statements were processed, and it was noted that the roots would be removed from the Mozilla Root Store.

1. 2020-02-10 Bug filed due to ALV failures reported for GRCA's intermediate certificates.
2. 2020-05-25 GRCA provided updated audit statements to address ALV failures.
3. 2020-07-29 It was confirmed that the roots are being removed from the Mozilla Root Store.

1. 2020-02-10 Mozilla representative — Filed a bug regarding ALV failures for GRCA's intermediate certificates.
2. 2020-02-17 Ndc representative — Discussed issues with auditor and planned to fix formatting problems in the next audit statement.
3. 2020-05-25 Ndc representative — Provided updated audit statements to Mozilla.
4. 2020-07-29 Mozilla representative — Confirmed that the roots are being removed from the Mozilla Root Store.