SwissSign: recommendation on publication process for CA related data

The audit report for SwissSign recommended improvements to the publication process for CA-related data in its public repository. This includes ensuring the accuracy of PKI chains and relevant certificates. The report identified that the current manual construction of the repository page increased the risk of inconsistencies. SwissSign has since completed action items to address these issues, including reviewing and correcting identified inconsistencies and exploring automation options to enhance the process. All action items have been completed, and SwissSign is committed to maintaining compliance with ETSI requirements and Mozilla expectations.

1. 2025-09-12 Audit report containing recommendations published
2. 2026-04-27 Action item completed and reviewed by auditors