Add Firmaprofesional root CA certificate (Spain)

This case is a request to add the Firmaprofesional root CA certificate (Spain) to Mozilla’s default trust list. The CA Program reviewer (hecker) received a request from Firmaprofesional SA to add its root CA certificate and began evaluating Firmaprofesional’s audit status and certificate issuance practices. The reviewer noted that Firmaprofesional had completed a WebTrust audit and described the CA hierarchy as a single root CA with a single subordinate CA, with end-entity certificates issued by the subordinate CA. The reviewer initially awaited clarification about verification procedures for SSL server certificates, then received a translation of the relevant CP section (3.1.7) confirming that Firmaprofesional validates identity for SSL certificate requests and verifies organizational authorization for organizational certificates. After the comment period ended and the SSL verification procedures were confirmed, the reviewer approved inclusion and proceeded to file a corresponding bug against NSS. The bug was later resolved as FIXED, with a note that the Firmaprofesional cert was added to NSS in September 2006 in bug 343662.

1. 2006-06-22 A request was received to add Firmaprofesional’s root CA certificate to Mozilla’s default trust list.
2. 2006-07-05 The reviewer confirmed Firmaprofesional’s SSL certificate verification procedures and approved root inclusion.
3. 2007-01-30 The case was resolved after the certificate had been added to NSS (September 2006, via bug 343662).

1. 2006-06-22 Hecker representative — Hecker said he received a request from Firmaprofesional SA to add its root CA certificate, noted the WebTrust audit, and planned further review of subordinate CA certificate types and verification.
2. 2006-06-23 Hecker representative — Hecker provided details on Firmaprofesional’s CA structure and certificate types and said he was awaiting clarification on SSL server certificate verification procedures.
3. 2006-07-05 Hecker representative — Hecker reported a translation confirming SSL verification procedures and, with the comment period ended, approved inclusion and planned to file an NSS-related bug.
4. 2007-01-30 Mozilla representative — Gerv stated the Firmaprofesional cert was added to NSS in September 2006 in bug 343662 and resolved this bug.