ANF AC: Delayed Disclosure of Updated Policy Documents in CCADB

On June 18, 2025, ANF AC identified a failure to timely disclose updated versions of its Certificate Policy (CP) and Certificate Practice Statement (CPS) documents in the Common CA Database (CCADB), as required by the Chrome Root Program. The updated documents were uploaded on June 2, 2025, but this was beyond the mandated 14-day disclosure window. The incident was reported by a third party. ANF AC has since completed a full incident report and implemented several preventive measures, including enhanced internal controls and training to ensure compliance with disclosure timelines. The case has been resolved with all action items completed.

1. 2025-06-18 ANF AC became aware of the delayed disclosure of updated policy documents.
2. 2025-07-02 ANF AC completed all action items and requested closure of the incident.

1. 2025-06-20 Autoridad de Certificación (ANF AC) — Preliminary Incident Report published detailing the failure to disclose updated documents.
2. 2025-06-30 Autoridad de Certificación (ANF AC) — Full Incident Report published with a timeline and root cause analysis.
3. 2025-07-02 Autoridad de Certificación (ANF AC) — Closure Report submitted, confirming all action items have been completed.