← certSIGN cases
Bugzilla #1965804
Audit Related
certSIGN: Findings in 2025 ETSI Audit - Audit Incident Report #1 – Improve clarity in CPS
RESOLVED
FIXED
certSIGN
AI Summary
The certSIGN CA was found to have clarity issues in its Certificate Policy Statement (CPS) during the 2025 ETSI audit. Specifically, the association of policy identifiers with specific OIDs was not explicitly stated, prompting auditors to request improvements. The incident did not impact any certificates, as the relevant policies were already specified elsewhere in the CPS. The CA has since updated the CPS to enhance clarity and ensure consistency across its documentation.
Chronology
- Incident identified during ETSI audit
- Updated CPS published with improvements
- Closure report submitted
Participants
Gabriel PETCU
External References
Similar Local Cases
certSIGN: Findings in 2025 ETSI Audit - Audit Incident Report #2 – Add test certificates in CPS
certSIGN: Findings in 2025 ETSI Audit - Audit Incident Report
certSIGN: Findings in 2024 ETSI Audit - Audit Incident Report
certSIGN: Findings in 2025 ETSI Audit - Audit Incident Report #5 – Conflicting info in CPS
certSIGN: Findings in 2025 ETSI Audit - Audit Incident Report #3 – Missing certSIGN OID on Terms and Conditions
certSIGN: Findings in 2023 ETSI Audit for certSIGN ROOT CA G2 - Audit Incident Report
Preliminary Audit Statements - certSIGN
Chunghwa Telecom: Findings in 2025 WebTrust Audit - GTLSCA Audit Incident Report #1 - mass certificate revocation plan