Firmaprofesional: delayed 2026 audit attestation letters under review
This bug concerns Autoridad de Certificacion Firmaprofesional’s delayed public availability of its 2026 Audit Attestation Letters. The thread says the signed explanatory letter from the Qualified Auditor covers the delayed issuance and publication of the Standard, TLS Baseline Requirements, and TLS Extended Validation Guidelines AALs for the audit period 2025-03-28 through 2026-03-27. Firmaprofesional stated that its investigation and preparation of the Full Incident Report are still in progress. It also said the CCADB case remains in "Verification By Root Store" and that the displayed ALV status for each section is still failing. The bug remains open, and Firmaprofesional said it will publish the Full Incident Report no later than 2026-07-30 11:05:52 UTC, or earlier if the remaining review is completed sooner. The related compliance incident in Bug 2055444 was updated, but no further resolution is stated here.
- Firmaprofesional submitted a signed explanatory letter about delayed publication of the 2026 audit attestation letters.
- Firmaprofesional said the final audit disclosures were still under review and the incident remained open.
- Autoridad de Certificacion Firmaprofesional — Created the bug with the Qualified Auditor’s signed explanatory letter about delayed 2026 AALs and linked the CCADB case and final AAL URLs.
- Autoridad de Certificacion Firmaprofesional — Noted a related compliance incident in Bug 2055444.
- Autoridad de Certificacion Firmaprofesional — Reported that the Full Incident Report was still in progress, the CCADB case remained in Verification By Root Store, and the incident remained open.
- Autoridad de Certificacion Firmaprofesional — Noted that Bug 2055444 was updated.