SECOM: CP/CPS does not clearly specify domain validation methods

SECOM Trust Systems CO., LTD. disclosed a compliance issue regarding their Certificate Policy (CP) and Certificate Practice Statement (CPS), which did not clearly specify the domain validation methods as required by Mozilla Root Store Policy. The issue was identified through a notification email regarding this Bugzilla case. In response, SECOM acknowledged the ambiguity and committed to updating their CP/CPS to clarify compliance with the Baseline Requirements. They have since launched a dedicated team to oversee compliance and have updated their CP as of May 31, 2021, to address the identified issues. The case is now resolved.

1. 2021-04-15 Bug filed regarding SECOM's CP/CPS compliance issue.
2. 2021-05-31 SECOM updated their CP to clarify domain validation methods.

1. 2021-04-15 Mm representative — SECOM's CP/CPS does not specify domain validation methods as required.
2. 2021-04-22 Secom representative — SECOM acknowledges the ambiguity and commits to clarifying the CP.
3. 2021-04-23 Secom representative — SECOM provides a detailed incident report and outlines corrective actions.
4. 2021-05-28 Secom representative — SECOM officially launched a dedicated team to oversee compliance.
5. 2021-06-01 Secom representative — SECOM confirms the CP update was completed as scheduled.