Actalis: missing CCADB disclosure for new SubCA

On August 11, 2025, Actalis reported a compliance issue regarding its newly-created SubCA, which issued publicly-trusted certificates before being disclosed on the Common CA Database (CCADB). The incident was triggered by a third-party report highlighting that the SubCA, intended for future disclosure, had issued certificates without prior CCADB notification. Actalis subsequently disclosed the relevant certificates on CCADB on the same day. The CA has since updated its internal policies and procedures to ensure compliance with disclosure requirements for cross-certificates and has committed to continuous monitoring of regulatory updates.

1. 2025-07-30 Actalis generated new SubCAs and cross-certificates.
2. 2025-08-11 Actalis disclosed the SubCA and cross-certificates on CCADB.

1. 2025-08-12 Staff representative — Actalis provided a preliminary incident report regarding the missing CCADB disclosure.
2. 2025-08-26 Staff representative — Actalis submitted a full incident report detailing the timeline and impact of the incident.
3. 2025-10-28 Staff representative — Actalis reported completion of all action items and requested closure of the incident report.