Atos: Incorrect OCSP Delegated Responder Certificate

Atos issued OCSP Delegated Responder certificates without the required `id-pkix-ocsp-nocheck` response, violating Baseline Requirements. The issue was reported on July 2, 2020, leading to an investigation and subsequent revocation of affected certificates. All affected CAs were revoked within a week, and the private keys were destroyed in the presence of an auditor. An incident report detailing the timeline and corrective actions was provided.

1. 2020-07-02 Issue reported and investigation initiated.
2. 2020-07-08 Revocation of 2 affected CAs.
3. 2020-07-14 Private keys of affected ICAs destroyed.