← Certigna cases
Bugzilla #1973027
Policy Compliance
Certigna: Finding #1 ETSI Audit – French translation missing from S/MIME CP/CPS
RESOLVED
FIXED
Certigna
AI Summary
Certigna identified a compliance issue during an ETSI audit where certain descriptions in the S/MIME CP/CPS were not translated into French, violating French eIDAS requirements. The non-compliance was detected between March 19 and May 27, 2025, but no impact on certificates was reported. Corrective actions included updating the French CP/CPS and reinforcing guidelines for translation accuracy. All action items have been completed, and the case is now resolved.
Chronology
- Update of the S/MIME CP/CPS with new certificate profiles.
- Auditor identifies untranslated information in the French CP/CPS.
- Validation of deviation resolution by auditor.
Participants
Josselin Allemandou
Romain Delval
External References
Similar Local Cases
IdenTrust: basicConstraints not flagged "Critical" Per Certification Practices Statement
ANF AC: Finding #1 ETSI Audit - Missing log retention period in Terms and Conditions v1.9
ANF AC: Finding #4 ETSI Audit - Missing one Revocation circumstance on CPS
Entrust: Missing or Inconsistent Disclosure of S/MIME BR Audits
Lawtrust: The S/MIME CA’s policy identifiers did not align with the CA/Browser Forum Requirements.
PKIoverheid: TSP KPN Findings in 2025 ETSI Audit - Incident Report #15 – Outdated Software
ANF AC: Test Certificates Non-Compliance
HARICA: P-384,ecdsa-with-SHA256 Certificates