← certSIGN cases
Bugzilla #1963546
Audit Related
certSIGN: Findings in 2025 ETSI Audit - Audit Incident Report
RESOLVED
FIXED
certSIGN
AI Summary
certSIGN underwent its yearly audit for 2025, resulting in several findings categorized as minor non-conformities. Key issues included unclear policy identifiers in the Certification Practice Statement (CPS), improper issuance of test certificates, and conflicting information in documentation. The auditors recommended corrective actions and updates to the CPS and related procedures. certSIGN has committed to addressing these findings and has opened separate tickets for each issue identified during the audit.
Chronology
- Audit findings reported
- Separate tickets for each finding opened
- Proposal to close the incident report
Participants
Gabriel PETCU
Rowley Law
Mozilla CA Program
External References
Similar Local Cases
certSIGN: Findings in 2025 ETSI Audit - Audit Incident Report #3 – Missing certSIGN OID on Terms and Conditions
certSIGN: Findings in 2023 ETSI Audit for certSIGN ROOT CA G2 - Audit Incident Report
certSIGN: Findings in 2025 ETSI Audit - Audit Incident Report #2 – Add test certificates in CPS
certSIGN: Findings in 2025 ETSI Audit - Audit Incident Report #1 – Improve clarity in CPS
certSIGN: Findings in 2025 ETSI Audit - Audit Incident Report #5 – Conflicting info in CPS
certSIGN: Findings in 2024 ETSI Audit - Audit Incident Report
Preliminary Audit Statements - certSIGN
Telia: Findings in 2024 Audit