Firmaprofesional request to enable EV treatment for its root certificate

This case concerns Firmaprofesional’s request to enable EV treatment for its already-included root certificate, “Autoridad de Certificacion Firmaprofesional CIF A62634068.” The request began with Firmaprofesional providing updated CP/CPS documentation and a WebTrust EV audit, then working through Mozilla’s EV testing process for its certificate hierarchy. Mozilla identified problems in the EV test setup, including mismatched EV policy OIDs and missing OCSP information, and asked Firmaprofesional to reissue the intermediate certificate and complete EV testing. Firmaprofesional later issued a new intermediate CA certificate and changed the test URL, after which Mozilla recorded that EV treatment was successfully tested. Mozilla then opened public discussion, completed the assessment, and approved the request to enable EV treatment for the root. The related implementation change was filed in bug 935674.

1. 2012-09-25 Firmaprofesional submitted updated CP/CPS documentation and a WebTrust EV audit for EV enablement.
2. 2013-06-21 Firmaprofesional issued a new intermediate CA certificate and changed the test URL for EV testing.
3. 2013-06-21 Mozilla recorded successful EV testing.
4. 2013-11-06 Mozilla approved EV treatment for the Firmaprofesional root certificate.

1. 2012-09-25 Chemalogo representative — Firmaprofesional attached updated policy documents and a WebTrust EV audit, and referenced the earlier root-inclusion bugs.
2. 2012-10-03 Mozilla representative — Mozilla attached an initial CA information document and asked Firmaprofesional to review it for completeness.
3. 2013-01-04 Velox representative — Mozilla explained that the intermediate certificate needed a correct certificatePolicies extension and that OCSP support was required for EV subordinate CA certificates.
4. 2013-01-14 Mozilla representative — Mozilla asked Firmaprofesional to update the bug after issuing a new intermediate certificate and successfully completing EV testing.
5. 2013-06-10 Chemalogo representative — Firmaprofesional said it planned to reissue the intermediate CA certificate and add the anyPolicy extension.
6. 2013-06-21 Chemalogo representative — Firmaprofesional said it had issued a new intermediate CA certificate and changed the test URL.
7. 2013-06-21 Mozilla representative — Mozilla attached EV testing results showing that EV treatment was successfully tested.
8. 2013-08-06 Mozilla representative — Mozilla opened the first public discussion period for the EV enablement request.
9. 2013-10-30 Mozilla representative — Mozilla summarized the assessment of Firmaprofesional’s request and listed the root, policy OID, and CRL information.
10. 2013-11-06 Mozilla representative — Mozilla approved the request to enable EV treatment for the Firmaprofesional root and filed bug 935674 for the implementation change.