Documents for Hongkong Post

This bug was created to store audit-related documents for Hongkong Post’s publicly disclosed and audited intermediate certificates chaining up to Hongkong Post CA root certificates. The reporter stated that Hongkong Post completes WebTrust audits for CA SSL Baseline and Network Security, as well as EV SSL, and that the audit reports may take weeks to appear on the official webtrust.org website. To ensure the documents can pass Mozilla’s Audit Letter Validation (ALV), the reporter uploaded them as preliminary audit reports under the Hongkong Post CA audit case. The Mozilla assigned reviewer closed the bug but noted it could be used for future needs to store Hong Kong Post audit documents. Additional attachments were later added, including accountant reports and management assertions, and links were provided for seal files that were preliminary and would be finalized. The bug is marked RESOLVED with resolution WORKSFORME.

1. 2021-03-01 Man Ho opened a Mozilla CA Program bug to upload WebTrust audit documents for Hongkong Post CA intermediates for ALV purposes.
2. 2021-03-19 Ben Wilson added additional WebTrust-related attachments and provided links for preliminary seal files to be finalized.
3. 2021-03-25 Man Ho uploaded updated WebTrust CA/SSL Baseline/EV SSL report documents with added auditor information.
4. 2021-03-19 Ben Wilson closed the bug for current use while indicating it may be reused for future audit document storage.

1. 2021-03-01 Certizen representative — Created the bug and attachments for WebTrust CA/SSL Baseline/EV SSL preliminary audit reports, stating they are needed to pass Audit Letter Validation (ALV).
2. 2021-03-01 Certizen representative — Added the WebTrust SSL Baseline 2021 report attachment.
3. 2021-03-01 Certizen representative — Added the WebTrust EV SSL 2021 report attachment.
4. 2021-03-01 Mozilla representative — Closed the bug, noting it may be used for all future needs to store Hong Kong Post audit documents.
5. 2021-03-19 Mozilla representative — Added attachments for HKPCA accountant’s report and management assertions (WebTrust CA SSL Baseline and WebTrust CA).
6. 2021-03-19 Mozilla representative — Provided links to preliminary seal files on cpacanada.ca and stated they would be finalized.
7. 2021-03-25 Certizen representative — Added WebTrust CA/SSL Baseline/EV SSL report attachments with Appendix A (auditor information).