← Government of The Netherlands, PKIoverheid (Logius) cases
Bugzilla #1985816
Incident
PKIoverheid: TSP Cleverbase Findings in 2025 ETSI Audit - Incident Report #1 – Incorrect issuer CA listed in CPS
RESOLVED
FIXED
Government of The Netherlands, PKIoverheid (Logius)
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
During the 2025 ETSI audit, PKIoverheid's TSP Cleverbase identified a minor non-conformity regarding the Certification Practice Statement (CPS), which incorrectly listed the issuer CA hierarchy. The error was discovered during the audit and was promptly addressed by updating the CPS. The CA implemented a checklist and automated validation processes to prevent similar issues in the future. All action items related to this incident have been completed, and the case is now resolved.
Chronology
- Non-compliance start date identified.
- Non-compliance identified during audit.
- Non-compliance end date after CPS update.
- Closure report submitted and all action items completed.
Thread Activity
- Logius representative — Incident report detailing the non-conformity was submitted.
- Logius representative — Clarified that not all action items had been completed.
- Logius representative — Final report closure summary provided, confirming all actions taken.
Participants
Logius representative
Community commenter
CCADB representative
External References
Similar Local Cases
PKIoverheid: TSP KPN Findings in 2025 ETSI Audit - Incident Report #7 – Change Management
PKIoverheid: TSP KPN Findings in 2025 ETSI Audit - Incident Report #9 – Lifecycle Management
PKIoverheid: TSP KPN Findings in 2025 ETSI Audit - Incident Report #10 – Firewall Rules and Review
PKIoverheid: TSP KPN Findings in 2025 ETSI Audit - Incident Report #11 – Anti-Malware Software
PKIoverheid: TSP KPN Findings in 2025 ETSI Audit - Incident Report #15 – Outdated Software
PKIoverheid: TSP CIBG Findings in 2025 ETSI Audit - Incident Report #1 – Document Management
PKIoverheid: TSP CIBG Findings in 2025 ETSI Audit - Incident Report #2 – Supply Chain Management
PKIoverheid: TSP CIBG Findings in 2025 ETSI Audit - Incident Report #3 – Asset Management