1297034 - DocuSign Audit Statements

Status: RESOLVED WORKSFORME

(CA Program :: CA Documents, task)

Description

[Erwann Abalea]

Attachment: 111050_Attestation-V2_US.pdf

User Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36

Steps to reproduce:

This audit attestation complements CAs listed under bug #1025095 and bug #335392.

Comment 1

[Kathleen Wilson]

I see that this audit attestation covers the following root certificates that are included in NSS, and the intermediate certs they have signed:
Certplus Root CA G1
Certplus Root CA G2
OpenTrust Root CA G1
OpenTrust Root CA G2
OpenTrust Root CA G3

I was not able to ascertain that the "Class 2 Primary CA" that is also included in NSS is covered by this audit attestation.
SHA-1 Fingerprint	
74:20:74:41:72:9C:DD:92:EC:79:31:D8:23:10:8D:C2:81:92:E2:BB
SHA-256 Fingerprint	
0F:99:3C:8A:EF:97:BA:AF:56:87:14:0E:D5:9A:D1:82:1B:B4:AF:AC:F0:AA:9A:58:B5:D5:7A:33:8A:3A:FB:CB

Comment 2

[Kathleen Wilson]

I received an update via email today saying that the audit of the "Class 2 Primary CA" and its subCAs completed in October, and the CA is now waiting for the auditor to write his attestation letter.

Comment 3

[Kathleen Wilson]

(In reply to Kathleen Wilson from comment #2)
> I received an update via email today saying that the audit of the "Class 2
> Primary CA" and its subCAs completed in October, and the CA is now waiting
> for the auditor to write his attestation letter.

Erwann, Any update on the audit statement for the "Class 2 Primary CA"?

Comment 4

[Erwann Abalea]

Attachment: Attestation for the "Certplus Class 2 Primary CA" Root

Received today from the auditor.

Comment 5

[Kathleen Wilson]

(In reply to Erwann Abalea from comment #4)
> Created attachment 8849236 [details]
> Attestation for the "Certplus Class 2 Primary CA" Root
> 
> Received today from the auditor.

I have received email from the auditor saying that the attached audit statement is a valid audit attestation provided by LSTI.

Comment 6

[Kathleen Wilson]

Closing this bug, but this bug may continue to be used for tracking this CA's annual audit statements.

Comment 7

[Erwann Abalea]

Attachment: New attestation 2017