← Internet Security Research Group cases

Let's Encrypt draft WebTrust audit documents repository

RESOLVED WORKSFORME Internet Security Research Group

This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update. Always refer to the official Bugzilla thread as the authoritative source. If you spot an inaccuracy, let me know via the contact form.

AI Summary

This bug is being used by Let's Encrypt to store draft audit documents for multiple audit cycles. Aaron Gable opened it in November 2023 specifically because earlier similar bugs had been closed and could not be reused. The thread shows repeated uploads of draft WebTrust materials for 2023, 2024, 2025, and 2026, including auditor opinions and audit team qualifications. Mozilla's Brian Wilson noted that the bug may continue to be used to store CA documents. The bug is resolved as WORKSFORME, and the thread does not describe any compliance finding or remediation issue beyond document storage.

Model: gpt-5.4-mini Generated: 2026-06-13 21:18 UTC Revised: 2026-10-20 18:00 UTC Confidence: 0.98 23 comments

Chronology

2023-11-07 Let's Encrypt created a bug to host draft audit documents.
2024-11-06 Draft 2024 WebTrust audit documents were uploaded.
2025-11-10 Draft 2025 auditor opinion documents were uploaded.
2026-10-19 Draft 2026 audit documents were uploaded.

Thread Activity

2023-11-07 Internet Security Research Group — He said the bug exists to provide a place to upload documents related to Let's Encrypt's audits because earlier similar bugs were closed.
2023-12-18 Mozilla representative — He said the bug may continue to be used to store CA documents.
2025-11-07 Internet Security Research Group — He said the bug was now being used to host drafts of 2025 audit documents.
2026-10-19 Internet Security Research Group — He said the bug was now being used to host drafts of the 2026 audit documents.

Participants

Internet Security Research Group Mozilla representative

External References

Original Bugzilla Case

Related Bugzilla IDs Mentioned

#1341718 #1441413 #1802059

Similar Local Cases

#1390314 RESOLVED Ca Documents Audit Document Auditor Qualification Opened By Root Store Opened 2017-08-14 · Closed 2026-09-16 · 81% similar

Audit Info for SSL.com

AI Summary CA Owner

#1653923 REOPENED Ca Documents Audit Document Self Assessment Cp Cps Document Opened 2020-07-20 Still Open · 79% similar

WebTrust Audits: Shanghai Electronic Certification Authority Co., Ltd. (SHECA)

AI Summary CA Owner

#1472993 RESOLVED Ca Documents Audit Document Opened By Ca Single Ca Owner Opened 2018-07-03 · Closed 2026-07-01 · 79% similar

Sectigo audit reports

AI Summary CA Owner

#1716351 RESOLVED Ca Documents Audit Document Remediation Tracking Opened By Root Store Opened 2021-06-14 · Closed 2026-06-25 · 79% similar

HARICA: Audit Documents

AI Summary CA Owner

#1722411 RESOLVED Ca Documents Audit Document Self Assessment Public Discussion Opened 2021-07-26 · Closed 2026-08-05 · 77% similar

Documents for Microsoft PKI Services intermediate certificates

AI Summary CA Owner

#1626355 RESOLVED Ca Certificate Compliance Ca Documents Audit Document Qualified Audit Opened 2020-03-31 · Closed 2023-02-22 · 76% similar

Atos: Tracking bug for possible audit delays

AI Summary CA Owner

#1807304 RESOLVED Audit Document Opened 2022-12-23 · Closed 2024-11-28 · 75% similar

DigiCert 2022 Webtrust Audits

AI Summary CA Owner

#1904494 RESOLVED Ca Certificate Compliance Ca Documents Audit Document Remediation Tracking Opened 2024-06-25 · Closed 2024-09-04 · 75% similar

Asseco DS / Certum: Cross-certificate not included in 2024 S/MIME Audit statement

AI Summary CA Owner