← Autoridad de Certificación (ANF AC) cases
Bugzilla #1973236
CCADB Compliance
ANF AC: Delayed Disclosure of Updated Policy Documents in CCADB
RESOLVED
FIXED
Autoridad de Certificación (ANF AC)
AI Summary
On June 18, 2025, ANF AC identified a failure to timely disclose updated versions of its CPS and CP documents in the CCADB, as required by the Chrome Root Program. The updated documents were uploaded after the mandated 14-day period. The incident was reported by a third party, and while no certificates were affected, it highlighted a lack of internal controls for tracking document updates. ANF AC has since implemented several corrective measures, including new internal procedures and training to prevent future occurrences.
Chronology
- Deadline for CP v3.3.7 to be disclosed in CCADB.
- Deadline for CPS v3.10 to be disclosed in CCADB.
- CP and CPS uploaded to CCADB as part of Case 00002433.
- Incident reported via ANF AC’s incident reporting channel.
- Closure report submitted, requesting incident closure.
Participants
Pablo Díaz
External References
Similar Local Cases
DigiCert: Persistent failure to answer questions in a timely manner
DigiCert: Outdated CPS for 13 Roots in CCADB
Amazon Trust Services: Overdue audit statements for intermediate certificates
DigiCert: Late CP/CPS CCADB uploads
E-Tugra: Failure to respond to January 2018 survey
Tuntrust: Failure to Respond to April 2023 Survey
DigiCert: Issues with CCADB entries
TurkTrust: Failure to respond to January 2018 survey