Firmaprofesional: Delayed publication of 2026 Audit Attestation Letters
Autoridad de Certificacion Firmaprofesional self-reported an incident related to the CCADB publication of its 2026 Audit Attestation Letters (AALs). The CA identified that the statement date of 2026-07-15 was more than 92 calendar days after the audit period end date of 2026-03-27, with the CCADB Policy deadline set to 2026-06-27 (Section 5.2). The CA stated that, as of the deadline, records reviewed did not identify a final AAL or a signed explanatory letter publicly provided by that deadline for the affected disclosures (Standard, TLS Baseline Requirements, and TLS Extended Validation Guidelines AALs). The CA reported that the final AALs have since been issued and entered in CCADB Case 00003334, and that a signed explanatory letter from the Qualified Auditor has been published in Bugzilla under the CA Documents component in Bug 2055439. The CA also stated that it is continuing to determine the complete timeline, any additional impact, contributing factors, and corrective actions, and that the incident remains ongoing at the preliminary stage.
- Firmaprofesional submitted the 2026 Audit Attestation Letters to the CCADB with a statement date of 2026-07-15, after the 92-day deadline for the audit period ending 2026-03-27.
- CCADB Policy deadline (Section 5.2) for uploading the final AALs or a signed explanatory letter for the audit period ending 2026-03-27.
- Firmaprofesional self-reported the delay and noted that the final AALs and the signed explanatory letter have been published.
- Autoridad de Certificacion Firmaprofesional — Posted a preliminary incident report describing the CCADB Policy Section 5.2 deadline miss for 2026 AAL disclosures and stating that the final AALs and a signed explanatory letter have since been published.