← Autoridad de Certificación (ANF AC) cases
Bugzilla #1973236
CCADB Compliance
ANF AC: Delayed Disclosure of Updated Policy Documents in CCADB
RESOLVED
FIXED
Autoridad de Certificación (ANF AC)
AI Summary
On June 18, 2025, ANF AC identified a failure to timely disclose updated versions of its CPS and CP documents in the CCADB, as required by the Chrome Root Program. The updated documents were uploaded after the mandated 14-day period. The incident was reported by a third party, and while no certificates were affected, it highlighted a lack of internal controls for tracking document updates. ANF AC has since implemented several corrective measures, including new internal procedures and training to prevent future occurrences.
Chronology
- Deadline for CP v3.3.7 to be disclosed in CCADB.
- Deadline for CPS v3.10 to be disclosed in CCADB.
- CP and CPS uploaded to CCADB as part of Case 00002433.
- Incident reported via ANF AC’s incident reporting channel.
- Closure report submitted, requesting incident closure.
Participants
Pablo Díaz
External References
Similar Local Cases
NETLOCK: Intermediate CA Certificate not disclosed to CCADB
Telia: Delayed submission of preliminary audit incident report
Sectigo: Late CCADB update after CPS update
DigiCert: Persistent failure to answer questions in a timely manner
DigiCert: Outdated CPS for 13 Roots in CCADB
Netlock: Failure to Provide Weekly Updates
NETLOCK: Full Incident Report was not published within 14 days of notification
Amazon Trust Services: Overdue audit statements for intermediate certificates