HARICA: One of the two Certificate Problem Report email aliases not working

HARICA reported an incident involving one of its two email aliases for Certificate Problem Reports (CPR) becoming non-functional due to an internal procedure failure. The issue was discovered when a third party attempted to submit a CPR, and the email bounced back. HARICA promptly restored the alias and initiated an internal investigation to understand the failure. They disclosed this incident for transparency and to seek community guidance on whether it constituted a violation of policies. The CA has since updated its policies and procedures to prevent future occurrences, including ensuring both email aliases are listed in CCADB and improving clarity in their CP/CPS documentation.

1. 2025-04-30 HARICA discovered that one of its CPR email aliases had expired and was not receiving emails.
2. 2025-05-08 HARICA submitted a full incident report detailing the issue and corrective actions taken.
3. 2025-06-20 HARICA released an updated CP/CPS reflecting the changes made to their CPR reporting process.
4. 2025-07-08 The incident report was closed after confirming all action items were completed.

1. 2025-04-30 HARICA — HARICA disclosed an issue with one of its CPR email aliases not functioning due to an internal failure.
2. 2025-05-01 Community commenter — Commented that this incident should be treated as a bug due to the CA not following its own CPS.
3. 2025-05-02 HARICA — Confirmed that HARICA will provide a complete incident response by the end of the week.
4. 2025-06-30 HARICA — Submitted an incident closure summary detailing the root causes and remediation actions taken.