Firmaprofesional policy-document omission resolved; incident report pending closure
Firmaprofesional opened this case as a self-reported incident about a missing required statement in its public policy documentation. The issue was first identified after an external comment in Bug 2054448 prompted a review, and Firmaprofesional confirmed that its then-current CPS and Certification Policy for Website Authentication Certificates did not explicitly state adherence to the latest Chrome Root Program Policy and CCADB Policy. Firmaprofesional said the omission affected policy documentation only, not certificate content or issuance, and issuance was not stopped. On 2026-09-14, it published version 260914 of the applicable policy document with the required statement, and on 2026-09-18 it reported that the related CCADB case was closed and the synchronized record was corrected. On 2026-10-02, Firmaprofesional reported that the controlled policy-change register was complete and submitted a closure summary, and CCADB said the incident report would be closed around 2026-10-09.
- Chrome Root Program Policy v1.8 section 1.1.3 became effective, requiring the policy statement to be included in the CA’s CP or CP/CPS.
- An external comment in Bug 2054448 raised the missing policy-attestation issue.
- Firmaprofesional published version 260914 of its Certification Policy for Website Authentication Certificates with the required statement.
- Firmaprofesional reported that the CCADB case was closed and the synchronized record was corrected.
- Firmaprofesional reported that the controlled policy-change register was complete and submitted a report closure summary.
- Autoridad de Certificacion Firmaprofesional — Filed a preliminary incident report describing the missing policy attestation and said a corrected policy document and full incident report were being prepared.
- Autoridad de Certificacion Firmaprofesional — Submitted the full incident report and said the policy document and CCADB records still needed correction and verification.
- Autoridad de Certificacion Firmaprofesional — Reported that the corrected policy document had been approved and published, while the CCADB update and controlled policy-change register remained open.
- Autoridad de Certificacion Firmaprofesional — Reported that the CCADB case was closed, the synchronized record was corrected, and the remaining open action item was the controlled policy-change register.
- Autoridad de Certificacion Firmaprofesional — Reported that the controlled policy-change register was complete and requested closure of the incident report.
- CCADB representative — Issued a final call for comments or questions and said the incident report would be closed around 2026-10-09.