← Autoridad de Certificacion Firmaprofesional cases
Bugzilla #1832342
Policy Compliance
Firmaprofesional: 2023 - documentary inconsistency
RESOLVED
FIXED
Autoridad de Certificacion Firmaprofesional
AI Summary
The case addresses documentary inconsistencies identified during an annual eIDAS/ETSI audit of Firmaprofesional. The audit revealed that several certificates issued by the CA did not conform to the definitions in their certificate profiles document. The CA took immediate corrective actions, including updating their internal documents and certificate profiles to align with current standards. The issue was resolved, and the new profiles were published on their website. The CA has committed to ensuring such discrepancies do not occur in the future.
Chronology
- Finding identified during the annual eIDAS audit.
- Firmaprofesional analyzed the finding and corrected inconsistencies.
- New Certificate Profiles Document approved and published.
- Case scheduled for closure.
Participants
Maria Jose Prieto
Ben Wilson
Ryan Dickson
External References
Similar Local Cases
Firmaprofesional: 2020 Audit Report Finding 2 out of 4
Firmaprofesional: 2021 Audit Report Finding 2 out of 3
Entrust: Failed to provide a preliminary incident report according to TLS BR 4.9.5
Firmaprofesional: 2020 Audit Report Finding 1 out of 4
Firmaprofesional: Insufficient Audit Statements
Firmaprofesional: 2019 audit Finding #1 - 6.2 Identification and Authorization
NetLock: Replacement of enduser certificates after the EVGL 1.7.4 self-audit
Microsoft PKI Services: Policy Documentation, Failure to update Subscriber Certificate Max Validity Period