KIR S.A.: CP/CPS contains noncompliant DV method, does not specify CAA domains

Krajowa Izba Rozliczeniowa S.A. (KIR) disclosed a compliance issue regarding its Certification Practice Statement (CP/CPS), which failed to specify recognized CAA domains and included a noncompliant domain validation method. The issue was identified through a third-party report, prompting KIR to investigate and confirm the non-compliance. KIR has committed to updating its CP/CPS to address these deficiencies and has initiated a corrective action plan, including a timeline for updates and a review of its compliance processes. The updated CP/CPS was published on May 1, 2021, incorporating necessary changes.

1. 2021-04-17 KIR S.A. disclosed issues in its CP/CPS regarding domain validation and CAA records.
2. 2021-05-01 KIR S.A. published an updated CP/CPS addressing the identified compliance issues.

1. 2021-04-17 Mm representative — KIR S.A. has disclosed the following CP/CPS that does not specify recognized CAA domains.
2. 2021-04-19 Kir representative — KIR S.A. confirmed the issue and began an investigation.
3. 2021-04-23 Kir representative — KIR S.A. provided a detailed timeline of actions taken in response to the compliance issue.
4. 2021-05-01 Kir representative — Updated CP/CPS has been published, now including a section on CAA Records Processing.