| SUB ITEM 4.3: Text-searchable PDF Audit Statements The proposal is to add the following text to section 8.6 of the BRs: “The Audit Report MUST be available as a PDF, and SHALL be text searchable for all information required. Each SHA-256 fingerprint within the Audit Report MUST be uppercase letters and MUST NOT contain colons, spaces, or line feeds.” Note: This item is also being tracked in regards to directly updating the CCADB Policy via https://github.com/mozilla/pkipolicy/issues/210. |
|---|
| SUB ITEM 4.3 DATE |
| SUB ITEM 4.3 COMMENTS |
| CA Owner | Response | Response | Response |
|---|---|---|---|
| AC Camerfirma, S.A. | Our audit reports are already text-searchable PDF documents. | ||
| Actalis | Our audit reports are already text-searchable PDF documents. | ||
| Amazon Trust Services | Our audit reports are already text-searchable PDF documents. | ||
| Asseco Data Systems S.A. (previously Unizeto Certum) | Other (please describe below) | Our audit report are already text-searchable PDF documents, this year audit report will not contain colons, spaces, or line feeds. | |
| Atos | Our audit reports are already text-searchable PDF documents. | ||
| Autoridad de Certificacion Firmaprofesional | Our auditor indicates that we can do this by the date specified below. | 2020 Jul 31 | |
| Buypass | Our audit reports are already text-searchable PDF documents. | ||
| China Financial Certification Authority (CFCA) | Our auditor indicates that we can do this by the date specified below. | 2020 Oct 31 | We will meet the above requirements in this year's audit report, which is expected to be completed by the end of October at the latest |
| Chunghwa Telecom | Our auditor indicates that we can do this by the date specified below. | 2020 Oct 31 | |
| Consorci Administració Oberta de Catalunya (Consorci AOC, CATCert) | Our auditor indicates that we can do this by the date specified below. | 2020 Jul 31 | |
| Cybertrust Japan / JCSI | Our audit reports are already text-searchable PDF documents. | ||
| D-TRUST | Our audit reports are already text-searchable PDF documents. | ||
| Deutsche Telekom Security GmbH | Our audit reports are already text-searchable PDF documents. | ||
| Dhimyotis / Certigna | Our auditor indicates that we can do this by the date specified below. | 2020 Dec 1 | Our last audit report is available as a PDF and is text searchable but line feeds are always present despite our request and change made. Requirements will be applied for the next report povided by the auditor at the end of the year. |
| DigiCert | Our audit reports are already text-searchable PDF documents. | DigiCert: already text-searchable Apple SubCA: These updates will be incorporated into our next audit reports that will be published no later than 15-July-2020. | |
| Disig, a.s. | Our audit reports are already text-searchable PDF documents. | ||
| E-Tugra | Our audit reports are already text-searchable PDF documents. | ||
| Entrust | Other (please describe below) | Our audit reports are text searchable, but the SHA-256 fingerprint is lowercase. Our auditor has confirmed that they will use upper case in our 2021 audit reports. | |
| Global Digital Cybersecurity Authority Co., Ltd. (Formerly Guang Dong Certificate Authority (GDCA)) | Our audit reports are already text-searchable PDF documents. | ||
| GlobalSign nv-sa | Our audit reports are already text-searchable PDF documents. | ||
| GoDaddy | Our audit reports are already text-searchable PDF documents. | ||
| Google Trust Services LLC | Our audit reports are already text-searchable PDF documents. | ||
| Government of Hong Kong (SAR), Hongkong Post, Certizen | Our audit reports are already text-searchable PDF documents. | ||
| Government of Spain, Autoritat de Certificació de la Comunitat Valenciana (ACCV) | Our audit reports are already text-searchable PDF documents. | ||
| Government of Spain, Fábrica Nacional de Moneda y Timbre (FNMT) | Our audit reports are already text-searchable PDF documents. | We are working with our auditors to resolve fingerprint issues in one of the audit reports (March 2020). Both reports have been generated in the same way, both are PDF text searchable and includes all related fingerprints, but one of them is still failing. | |
| Government of Taiwan, Government Root Certification Authority (GRCA) | Other (please describe below) | GRCA and its sub CAs do not issue any TLS certificates since 18-Seepteember 2019, and we will revoke all TLS certificates on 7/19/2020. Our root cert will be removed from Mozilla's root store after 7/19/2020 Please see: https://bugzilla.mozilla.org/show_bug.cgi?id=1463975 | |
| Government of The Netherlands, PKIoverheid (Logius) | Our audit reports are already text-searchable PDF documents. | ||
| Government of Turkey, Kamu Sertifikasyon Merkezi (Kamu SM) | Our auditor indicates that we can do this by the date specified below. | 2020 Oct 24 | |
| HARICA | Our audit reports are already text-searchable PDF documents. | ||
| IdenTrust Services, LLC | Our audit reports are already text-searchable PDF documents. | ||
| Internet Security Research Group | Our audit reports are already text-searchable PDF documents. | ||
| Izenpe S.A. | Our audit reports are already text-searchable PDF documents. | ||
| Krajowa Izba Rozliczeniowa S.A. (KIR) | Our audit reports are already text-searchable PDF documents. | ||
| Microsec Ltd. | Our audit reports are already text-searchable PDF documents. | ||
| NETLOCK Kft. | Our audit reports are already text-searchable PDF documents. | ||
| OISTE | Our audit reports are already text-searchable PDF documents. | ||
| QuoVadis | Our audit reports are already text-searchable PDF documents. | ||
| SECOM Trust Systems CO., LTD. | Our auditor indicates that we can do this by the date specified below. | 2020 Sep 30 | |
| SK ID Solutions AS | Our audit reports are already text-searchable PDF documents. | ||
| SSL.com | Our audit reports are already text-searchable PDF documents. | ||
| Sectigo | Our audit reports are already text-searchable PDF documents. | ||
| SecureTrust | Our audit reports are already text-searchable PDF documents. | ||
| Shanghai Electronic Certification Authority Co., Ltd. | Our auditor indicates that we can do this by the date specified below. | 2020 Jul 1 | |
| SwissSign AG | Our audit reports are already text-searchable PDF documents. | ||
| Taiwan-CA Inc. (TWCA) | Our auditor indicates that we can do this by the date specified below. | 2021 Mar 31 | Our last audit reports are text searchable except for the page containing handwritten signature of the auditor. Our auditor can provide fully text searchable PDF in the next reports, which should be available by the date specified above. |
| Telia Company | Our auditor indicates that we can do this by the date specified below. | 2020 Jun 1 | This was communicated to our auditor. |
| TrustCor Systems | Our auditor indicates that we can do this by the date specified below. | 2020 Nov 1 | |
| Trustis | Our audit reports are already text-searchable PDF documents. | ||
| Web.com | Our audit reports are already text-searchable PDF documents. | ||
| certSIGN | Our audit reports are already text-searchable PDF documents. | ||
| eMudhra Technologies Limited | Our audit reports are already text-searchable PDF documents. |