← Autoridad de Certificacion Firmaprofesional cases
Bugzilla #1649502
Policy Compliance
Firmaprofesional: 2020 Audit Report Finding 1 out of 4
RESOLVED
FIXED
Autoridad de Certificacion Firmaprofesional
AI Summary
The case addresses a finding from Firmaprofesional's 2020 eIDAS audit, which identified non-conformities related to the availability of revocation status information for qualified certificates. The CA registered the issue in their JIRA system upon discovery and established an action plan. Despite delays in reporting due to the timing of the audit report, Firmaprofesional has since updated their Certificate Policy Statement (CPS) to include procedures for generating a last Certificate Revocation List (CRL) in cases of key compromise or service termination. The issue has been resolved and the CPS is now compliant with the necessary requirements.
Chronology
- Non Conformity registered in JIRA and action plan established.
- Incident reported in Bugzilla.
- Updated CPS published with new procedures.
Participants
chemalogo@isigma.es
ryan.sleevi@gmail.com
mprieto@firmaprofesional.com
bwilson@mozilla.com
External References
Similar Local Cases
Firmaprofesional: 2019 audit Finding #1 - 6.2 Identification and Authorization
Microsoft PKI Services: Firewall log data retention
Firmaprofesional: 2023 - documentary inconsistency
Firmaprofesional: Insufficient Audit Statements
Firmaprofesional: 2020 Audit Report Finding 2 out of 4
Firmaprofesional: 2021 Audit Report Finding 2 out of 3
Microsoft PKI Services: Failure to modify policy documents within 365 days
IdenTrust: basicConstraints not flagged "Critical" Per Certification Practices Statement