Closed Bug 1626402 Opened 5 years ago Closed 5 years ago

QuoVadis: Repository for WebTrust Audit Reports

Categories

(CA Program :: CA Documents, task)

task
Not set
normal

Tracking

(Not tracked)

RESOLVED WORKSFORME

People

(Reporter: stephen.davidson, Assigned: kathleen.a.wilson)

Details

(Whiteboard: [ca-audits])

Attachments

(36 files, 22 obsolete files)

463.62 KB, application/pdf
Details
413.56 KB, application/pdf
Details
288.14 KB, application/pdf
Details
319.68 KB, application/pdf
Details
90.08 KB, application/pdf
Details
5.40 MB, application/pdf
Details
765.37 KB, application/pdf
Details
944.45 KB, application/pdf
Details
385.92 KB, application/pdf
Details
273.79 KB, application/pdf
Details
263.72 KB, application/pdf
Details
413.06 KB, application/pdf
Details
1.57 MB, application/pdf
Details
313.30 KB, application/pdf
Details
291.43 KB, application/pdf
Details
238.61 KB, application/pdf
Details
321.18 KB, application/pdf
Details
4.88 MB, application/pdf
Details
369.79 KB, application/pdf
Details
441.12 KB, application/pdf
Details
430.95 KB, application/pdf
Details
392.04 KB, application/pdf
Details
435.66 KB, application/pdf
Details
206.29 KB, application/vnd.openxmlformats-officedocument.spreadsheetml.sheet
Details
197.13 KB, application/vnd.openxmlformats-officedocument.spreadsheetml.sheet
Details
358.53 KB, application/pdf
Details
441.16 KB, application/pdf
Details
218.94 KB, application/vnd.openxmlformats-officedocument.spreadsheetml.sheet
Details
1.46 KB, application/x-x509-ca-cert
Details
2.02 KB, application/x-x509-ca-cert
Details
358.57 KB, application/pdf
Details
354.11 KB, application/pdf
Details
320.89 KB, application/pdf
Details
379.83 KB, application/pdf
Details
347.88 KB, application/pdf
Details
184.99 KB, application/pdf
Details

Posting the QuoVadis WebTrust reports for the period 1 January 2019 to 31 December 2019, pending links being issued for the seals.

Reports issued 31 March 2020.

The ALV report did throw some errors, which we reviewed with our auditors at EY, and we believe to be false positives. A summary is attached.

Kathleen: I think you'd want to review Comment #4 along with Karina/Microsoft.

Stephen: Thanks for this approach. This is incredibly useful and valuable feedback.

Flags: needinfo?(kwilson)

(In reply to Ryan Sleevi from comment #5)

Kathleen: I think you'd want to review Comment #4 along with Karina/Microsoft.

I updated the strings allowed for the Code Signing policies, and those errors went away.

For the data errors, I filed a bug for the ALV team:
The audit period dates were found in the standard audit, but not in the other audits.
Standard audit (dates found by ALV): "during the period from 1 January 2019 through 31 December 2019"
Code Signing audit (dates NOT found by ALV): "throughout the period 1 January 2019 to 31 December 2019"
BR audit (dates NOT found by ALV): "throughout the period 1 January 2019 to 31 December 2019"
EV SSL audit (Dates NOT found by ALV): "throughout the period 1 January 2019 to 31 December 2019"

We can still proceed with processing this audit case when the Webtrust seals are available.

Flags: needinfo?(kwilson)

This bug may continue to be used for uploading annual audit statements and documents for this CA.

Status: UNCONFIRMED → RESOLVED
Closed: 5 years ago
Resolution: --- → WORKSFORME
Whiteboard: [ca-audits]

Updated QuoVadis ETSI EN 319 411-1 certificate, reissued 2021-01-19

Fixing a problem in footer of the PDF.

Attachment #9198476 - Attachment is obsolete: true
Summary: QuoVadis: WebTrust reports for period 1 January 2019 to 31 December 2019 → QuoVadis: Repository for WebTrust Audit Reports

Preliminary Audit Report for ALV testing.

for testing

for testing

for testing

testing again

test

Attachment #9212352 - Attachment is obsolete: true

test

Attachment #9212353 - Attachment is obsolete: true

test

Attachment #9212354 - Attachment is obsolete: true
Attachment #9212341 - Attachment is obsolete: true
Attachment #9212374 - Attachment is obsolete: true
Attachment #9212375 - Attachment is obsolete: true

test

Attachment #9212491 - Attachment is obsolete: true

test

Attachment #9212492 - Attachment is obsolete: true

Test

Attachment #9212502 - Attachment is obsolete: true
Attachment #9212551 - Attachment is obsolete: true

test

Attachment #9212553 - Attachment is obsolete: true

Test

Attachment #9212561 - Attachment is obsolete: true
Attachment #9212582 - Attachment is obsolete: true

Approved WebTrust for CA, pending the seal

Attachment #9212357 - Attachment is obsolete: true

Approved WebTrust for Code Signing, pending the seal

Attachment #9212501 - Attachment is obsolete: true

Approved WebTrust for EV, pending the seal

Attachment #9212597 - Attachment is obsolete: true

Approved WebTrust for BR, pending the seal

Attachment #9212376 - Attachment is obsolete: true

Siemens ETSI audit to ETSI EN 319 401 V2.2.1 and ETSI EN 319 411-1 V1.2.2. Certified on 2021-02-25. See also here.

Comment on attachment 9270132 [details]
2021 WebTrust for CA, pending the seal

2021 WebTrust for CA, pending the seal

2021 WebTrust for CS, pending the seal

2021 WebTrust for EV, pending the seal

Comment on attachment 9270135 [details]
2021 WebTrust for BR, pending the seal

2021 WebTrust for EV, pending the seal

Product: NSS → CA Program
Component: CA Certificate Root Program → CA Documents

WebTrust for CAs

2022 WebTrust for CS

2022 WebTrust for EV

2022 WebTrust for SSL

Attachment #9326054 - Attachment is obsolete: true
Attachment #9326057 - Attachment is obsolete: true
Attachment #9326060 - Attachment is obsolete: true
Attachment #9326061 - Attachment is obsolete: true
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: