PKIoverheid: No BR Audit for Intermediate CAs technically capable of issuing TLS certs

The case involves PKIoverheid's failure to conduct a Baseline Requirements (BR) audit for certain subordinate CAs that are technically capable of issuing TLS certificates, which violates Mozilla's Root Store Policy. Kathleen Wilson from Mozilla reported the issue on October 3, 2019. In response, PKIoverheid acknowledged the problem and initiated an investigation, committing to provide an incident report. The CA outlined a remediation plan, including revocation of certain certificates and migration to a new root CA. By March 2020, the affected root CA expired, and all related certificates were confirmed to have expired as well, resolving the compliance issue.

1. 2019-10-03 Mozilla reported lack of BR audits for PKIoverheid's subordinate CAs.
2. 2020-03-25 The root CA expired, along with all underlying CAs and certificates.

1. 2019-10-03 Mozilla representative — Reported the absence of BR audits for PKIoverheid's subordinate CAs.
2. 2019-10-18 Logius representative — Acknowledged the report and stated they were investigating the issue.
3. 2019-11-01 Logius representative — Provided a timeline of actions taken in response to the issue.
4. 2019-12-19 Logius representative — Updated on the revocation of certificates and the remediation plan.
5. 2020-01-21 Logius representative — Confirmed the revocation of QSCD cards with S/MIME certificates.
6. 2020-03-26 Logius representative — Confirmed the expiration of the root CA and all underlying certificates.