GlobalSign audit statements, self-assessment files, and related CA documents
This case is a CA Documents thread used by GlobalSign to submit audit-related compliance materials to Mozilla. It began in June 2020 with GlobalSign posting preliminary 2020 WebTrust audit statements and related reports, and Kathleen Wilson later stated that the bug could continue to be used for uploading audit statements and documents for this CA. Since then, GlobalSign has used the same bug for annual submissions covering 2021 through 2026, including WebTrust reports, auditor qualification documents, and CCADB self-assessment framework files. The thread also includes additional document uploads such as a VMC preliminary audit statement in 2024 and key-generation-related reports in 2024 and 2026. In June and July 2026, GlobalSign added two 2026 CCADB self-assessment framework spreadsheets, 2025-26 WebTrust reports, auditor qualifications, and replacement uploads for several 2026 report files. The bug does not contain an explicit allegation of certificate misissuance, revocation failure, or another incident; it functions as a document-submission record. The bug remains in RESOLVED status with resolution WORKSFORME.
- GlobalSign submitted preliminary 2020 WebTrust audit statements and related reports.
- GlobalSign submitted 2021 preliminary audit statements and auditor team qualifications.
- GlobalSign submitted 2022 preliminary audit statements and auditor team qualifications.
- GlobalSign submitted a CCADB self-assessment framework file and 2023 preliminary audit statements.
- GlobalSign submitted a WebTrust report and management assertion for a VMC key generation ceremony.
- GlobalSign submitted 2024 preliminary audit statements, a CCADB self-assessment framework file, and auditor qualifications.
- GlobalSign submitted a 2024 WebTrust VMC preliminary audit statement.
- GlobalSign submitted 2025 preliminary audit statements and auditor qualifications.
- GlobalSign submitted a 2025 CCADB self-assessment framework file.
- GlobalSign submitted a key generation report with management assertions.
- GlobalSign submitted a 2026 WebTrust key generation ceremony report for TLS.
- GlobalSign submitted 2026 CCADB self-assessment framework files, auditor qualifications, and 2025-26 WebTrust reports.
- GlobalSign submitted replacement copies of several 2026 WebTrust report files.
- GlobalSign nv-sa — GlobalSign opened the bug and submitted preliminary 2020 audit statements and related WebTrust reports.
- Mozilla representative — Kathleen Wilson said the bug may continue to be used for uploading audit statements and documents for this CA.
- GlobalSign nv-sa — GlobalSign submitted the 2021 preliminary audit statements and auditor team qualifications.
- GlobalSign nv-sa — GlobalSign submitted the 2022 preliminary audit statements and related files.
- GlobalSign nv-sa — GlobalSign added a CCADB self-assessment framework file and submitted the 2023 preliminary audit statements.
- GlobalSign nv-sa — GlobalSign uploaded a WebTrust report and management assertion for a VMC key generation ceremony.
- GlobalSign nv-sa — GlobalSign submitted 2024 preliminary audit statements, a CCADB self-assessment framework file, and auditor qualifications.
- GlobalSign nv-sa — GlobalSign re-submitted the WTCA report with a typo correction and linked the corrected attachment.
- GlobalSign nv-sa — GlobalSign submitted a 2024 WebTrust VMC preliminary audit statement.
- GlobalSign nv-sa — GlobalSign uploaded 2025 preliminary audit statements and auditor qualifications.
- GlobalSign nv-sa — GlobalSign submitted the 2025 CCADB self-assessment framework file and listed the 2025 audit materials.
- GlobalSign nv-sa — GlobalSign uploaded a key generation report with management assertions.
- GlobalSign nv-sa — GlobalSign uploaded a 2026 WebTrust key generation ceremony report for TLS.
- GlobalSign nv-sa — GlobalSign uploaded two 2026 CCADB self-assessment framework spreadsheets, auditor qualifications, and multiple 2025-26 WebTrust reports.
- GlobalSign nv-sa — GlobalSign uploaded replacement copies of the 2026 WTCS, WTMC, and WTTLS report files.