ANF AC: Finding #4 ETSI Audit - Missing one Revocation circumstance on CPS

The ANF AC faced a compliance issue during an ETSI audit due to the omission of an explicit clause in their Certification Policies and Practices document regarding certificate revocation when cryptography no longer ensures the binding between the subject and its public key. Although the compliance team believed this was implicitly covered in other sections, external auditors required explicit mention. The issue was identified on February 14, 2025, and resolved by updating the document on February 20, 2025. No certificates were affected as this was a documentation issue.

1. 2025-01-15 Publication of version 3.9 of the Certification Policies and Practices document without the explicit revocation clause.
2. 2025-02-14 Non-compliance detected by external auditors during the annual conformity assessment audit.
3. 2025-02-20 Publication of version 3.10 of the Certification Policies and Practices document, adding the explicit revocation clause.