Firmaprofesional: 2021 Audit Report Finding 3 out of 3

This case involves Firmaprofesional's disclosure of findings from their 2021 audit, specifically related to compliance with RFC 5280 and CA/Browser Forum requirements. The CA identified issues with certain certificates, including a subject:givenName field exceeding allowed sizes and missing certificate policy identifiers. Firmaprofesional took corrective actions, including ceasing issuance of affected certificates and updating their Certification Practices Statement (CPS) to clarify compliance with both national law and RFC requirements. The bug was resolved after Firmaprofesional addressed the findings and provided necessary documentation.

1. 2021-03-22 Firmaprofesional opened a bug regarding compliance issues identified in their audit.
2. 2021-06-30 Firmaprofesional provided details on the affected certificates and their corrective actions.
3. 2021-07-15 Firmaprofesional submitted additional documentation to clarify compliance with RFC 5280.
4. 2021-07-28 The bug was closed after review and confirmation of resolution.

1. 2021-06-23 Autoridad de Certificacion Firmaprofesional — Firmaprofesional reported findings from their audit and outlined compliance issues.
2. 2021-06-26 Community commenter — Concerns were raised regarding the clarity and completeness of the incident report.
3. 2021-07-01 Thisisntrocket representative — Further concerns were expressed about potential conflicts in the CPS and compliance with RFC 5280.
4. 2021-07-15 Mozilla representative — The issue was reviewed, and closure was anticipated.