certSIGN document repository for intermediate certificates and audit statements

This bug was opened by certSIGN to store documents related to its publicly disclosed and audited intermediate certificates chaining up to certSIGN root certificates. Over time, certSIGN uploaded multiple audit-related attachments, including WebTrust audit reports, audit attestation letters, explanatory letters for audit delays, CPS documents, and compliance self-assessment materials. Kathleen Wilson noted that the bug may continue to be used for uploading annual audit statements and documents for this CA. The thread does not describe a compliance finding or enforcement action; it is primarily a document repository for audit and related CA program materials. The bug was resolved WORKSFORME.

1. 2020-04-23 certSIGN opened a bug to store documents for publicly disclosed and audited intermediate certificates chaining to certSIGN root certificates.
2. 2020-05-08 Mozilla indicated the bug could continue to be used for annual audit statements and documents.
3. 2022-10-20 certSIGN uploaded additional compliance self-assessment and audit attestation documents.

1. 2020-04-23 certSIGN — certSIGN said the bug was for storing documents related to publicly disclosed and audited intermediate certificates chaining up to certSIGN root certificates.
2. 2020-05-08 Mozilla representative — Kathleen Wilson said the bug may continue to be used for uploading annual audit statements and documents for this CA.
3. 2021-05-07 certSIGN — certSIGN said it was waiting for Ernst & Young WebTrust auditors to send the audit statement link.
4. 2022-03-16 certSIGN — certSIGN uploaded a self-assessment for the inclusion of certSIGN ROOT CA G2 on the Apple Root Certificate Program.