PKIoverheid: KPN CPS lacks CPR problem reporting instructions

This case addresses a compliance issue regarding the KPN Certificate Policy Statement (CPS), specifically the absence of problem reporting instructions in section 1.5.2, as required by the Baseline Requirements (BR) 4.9.3. The CA, PKIoverheid, acknowledged the issue and communicated with KPN to rectify the omission. KPN agreed to include the necessary information in a future update of their CPS. Subsequent updates to the CPS were made, and the final version was confirmed to be compliant with the BRs. The case has been resolved with the implementation of a new review process to prevent similar issues in the future.

1. 2019-11-15 Initial report of missing problem reporting instructions in KPN CPS.
2. 2020-01-22 Final confirmation of compliance with updated CPS.

1. 2019-11-15 Mm representative — Reported that KPN CPS lacks problem reporting instructions.
2. 2019-11-18 Logius representative — Confirmed KPN would amend the CPS to include the missing section.
3. 2019-12-11 Logius representative — Explained the measures taken to prevent future compliance issues.
4. 2020-01-16 Logius representative — Announced the correction of the CPS and its publication.
5. 2020-01-22 Fastly representative — Confirmed that all questions have been answered and remediation is complete.