← Shanghai Electronic Certification Authority Co., Ltd. cases
Bugzilla #1653923
Ca Documents
Audit Document
Self Assessment
Cp Cps Document
Auditor Qualification
SHECA WebTrust audit reports, self-assessments, CPS/CP documents, and audit qualifications materials
REOPENED
Shanghai Electronic Certification Authority Co., Ltd.
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
This Bugzilla case is being used by Shanghai Electronic Certification Authority Co., Ltd. (SHECA) to submit CA documentation, primarily WebTrust audit materials. SHECA opened the bug in July 2020 with a WebTrust report and assertion, and Mozilla later stated that although the bug was being resolved, it could continue to be used as a repository for future audit documents from SHECA. Since then, SHECA has repeatedly added WebTrust reports and management assertions covering CA, TLS/SSL, EV TLS/EV SSL, Code Signing, S/MIME, Network Security, root key generation, and transportation-related materials. The thread also includes CCADB Self Assessment Framework spreadsheets, CPS and CP documents, and an audit team qualifications document. New activity since the previous summary includes a 2026-06-30 attachment titled "SHECA - Accountant's Report and Management Assertions (Transportation).pdf." The thread does not discuss a specific compliance incident or dispute; it functions as an ongoing document-submission repository. The bug remains REOPENED.
Chronology
- SHECA opened the bug with a WebTrust report and assertion attachment.
- Mozilla said the bug was being resolved but could remain a repository for future audit documents from SHECA.
- SHECA uploaded a CCADB Self Assessment Framework spreadsheet.
- SHECA uploaded CPS, CP, EV CPS, and EV CP documents.
- SHECA uploaded WebTrust documents including S/MIME, Network Security, and Root Key Generation Ceremony materials.
- SHECA uploaded 2024 CCADB Self Assessment Framework spreadsheets.
- SHECA uploaded a 2025 CCADB Self Assessment Framework spreadsheet.
- SHECA uploaded 2026 WebTrust reports and a keys transportation document.
- SHECA uploaded accountant's reports and management assertions for multiple WebTrust scopes plus an audit team qualifications document.
- SHECA uploaded an accountant's report and management assertions document for transportation.
Thread Activity
- Shanghai Electronic Certification Authority Co., Ltd. — Opened the bug and attached a SHECA WebTrust report and assertion.
- Shanghai Electronic Certification Authority Co., Ltd. — Added preliminary and updated WebTrust audit report attachments for multiple scopes.
- Mozilla representative — Said the bug was being resolved but could still be used as a repository for future audit documents from SHECA.
- Shanghai Electronic Certification Authority Co., Ltd. — Added further WebTrust report and management assertion attachments, followed by additional updated audit files in May and June 2021.
- Shanghai Electronic Certification Authority Co., Ltd. — Uploaded another set of WebTrust audit documents.
- Shanghai Electronic Certification Authority Co., Ltd. — Uploaded updated WebTrust documents, followed by several replacement or additional audit attachments in April and May 2023.
- Shanghai Electronic Certification Authority Co., Ltd. — Attached a CCADB Self Assessment Framework spreadsheet.
- Shanghai Electronic Certification Authority Co., Ltd. — Added CPS, CP, EV CPS, EV CP, and another CCADB self-assessment attachment.
- Shanghai Electronic Certification Authority Co., Ltd. — Uploaded another set of SHECA WebTrust report attachments.
- Shanghai Electronic Certification Authority Co., Ltd. — Uploaded WebTrust reports for S/MIME, EV SSL, Network Security, Root Key Generation Ceremony, SSL, Code Signing, and CA, with further related uploads later in May 2024.
- Shanghai Electronic Certification Authority Co., Ltd. — Attached a 2024 CCADB Self Assessment Framework spreadsheet.
- Shanghai Electronic Certification Authority Co., Ltd. — Added another 2024 CCADB Self Assessment Framework upload.
- Shanghai Electronic Certification Authority Co., Ltd. — Uploaded 2025 WebTrust reports for multiple scopes, followed by another set of 2025 WebTrust files in May.
- Shanghai Electronic Certification Authority Co., Ltd. — Attached a 2025 CCADB Self Assessment Framework spreadsheet.
- Shanghai Electronic Certification Authority Co., Ltd. — Uploaded 2026 WebTrust report files for CA, CS, EV TLS, NS, SMIME, and TLS.
- Shanghai Electronic Certification Authority Co., Ltd. — Added a keys transportation document and another set of 2026 WebTrust report attachments.
- Shanghai Electronic Certification Authority Co., Ltd. — Uploaded accountant's reports and management assertions for multiple WebTrust scopes plus an audit team qualifications document.
- Shanghai Electronic Certification Authority Co., Ltd. — Uploaded an accountant's report and management assertions attachment for transportation.
Participants
Shanghai Electronic Certification Authority Co., Ltd.
Mozilla representative
External References
Similar Local Cases
Sectigo audit reports
Documents for Microsoft PKI Services intermediate certificates
Audit Statements for GlobalSign
HARICA: Audit Documents
Asseco DS / Certum: Cross-certificate not included in 2024 S/MIME Audit statement
DigiCert 2022 Webtrust Audits
Apple: Audit Documents missing 2 Sub-CAs
Firmaprofesional: 2026 audit-delay explanatory letter