Firmaprofesional CP/CPS missing required Chrome Root Program and CCADB policy attestation
Firmaprofesional reported that its publicly disclosed policy documents did not explicitly state adherence to the latest Chrome Root Program Policy and CCADB Policy, as required by Chrome Root Program Policy v1.8 section 1.1.3. The issue was raised by an external comment in Bug 2054448, and Firmaprofesional then reviewed its current CPS and Certification Policy documents and confirmed the omission on 2026-09-01. The report says the known incident is limited to the missing statement in public policy documentation, with no identified certificate-content or certificate-issuance non-compliance and zero affected certificates. Firmaprofesional said issuance was not stopped because of this documentation issue. It is preparing a new version of the applicable policy document and said it will publish a full incident report within 14 days of the initial disclosure.
- An external comment in Bug 2054448 asked Firmaprofesional to identify the authoritative CP or CPS containing the required Chrome Root Program policy statement.
- Firmaprofesional confirmed its policy documents did not explicitly state adherence to the latest Chrome Root Program Policy and CCADB Policy.
- Firmaprofesional opened this preliminary incident report in Mozilla Bugzilla.
- Autoridad de Certificacion Firmaprofesional — Firmaprofesional filed a preliminary incident report describing the missing policy attestation, said the issue was third-party reported, and stated it was preparing a corrected policy document and a full incident report.