IZENPE: Outdated CPS for Izenpe Root

Izenpe S.A. disclosed a compliance failure regarding the timely submission of its Certificate Policy Statements (CPS) to the Common CA Database (CCADB). The CA failed to submit six CPS versions within the required 14 days of their effective dates, resulting in outdated documentation in CCADB. The root cause was identified as a lack of communication between teams responsible for maintaining the CPS and the SSL team. Izenpe has since taken corrective actions, including setting up monitoring tasks and modifying approval procedures to prevent future occurrences. The incident report has been completed and the necessary updates to CCADB have been made.

1. 2025-02-17 Izenpe submitted a preliminary report regarding outdated CPS documents.
2. 2025-05-30 Izenpe uploaded the unified CP/CPS document to its website and disclosed it to CCADB.

1. 2025-02-17 Izenpe S.A. — This is a preliminary report to analyze why Izenpe has failed to submit CPS documents on time to CCADB.
2. 2025-02-26 Mozilla representative — I’d like to highlight the importance of prompt communication regarding incident reports.
3. 2025-03-01 Izenpe S.A. — I will expand the initial report and provide more detail.
4. 2025-06-12 Izenpe S.A. — All Action Items disclosed in this report have been completed as described, and we request its closure.