← NAVER Cloud Trust Services cases
Bugzilla #2004698
Certificate Problem Report
NAVER Cloud Trust Services: Failure to respond to CPR within 24 hours
RESOLVED
FIXED
NAVER Cloud Trust Services
AI Summary
NAVER Cloud Trust Services failed to acknowledge a Certificate Problem Report (CPR) regarding the caIssuers URI encoding within the required 24-hour timeframe as mandated by the Baseline Requirements (BR) Section 4.9.5. The report was submitted on December 6, 2025, but the first acknowledgment was not made until December 8, 2025, after the deadline had passed. The CA has since implemented automated alerts and a twice-daily review process to ensure compliance with response times in the future.
Chronology
- CPR submitted to NAVER's reporting mailbox
- 24-hour response window elapsed without acknowledgment
- NAVER acknowledged receipt of the CPR and initiated investigation
- Preliminary Incident Report submitted
- Closure report requested
Participants
Dexter Döpping
Hogeun Yoo
External References
Similar Local Cases
NAVER Cloud Trust Services: CA Certificate not published in DER Encoded Format
NAVER Cloud Trust Services: Encoding non-conformity in SCT extensions
Certigna: Failure to respond to CPR within 24 hours
Chunghwa Telecom: Failure to respond to CPR within 24 hours
iTrusChina: CPR was not responded to within 24 hours
NETLOCK: CPR was not responded to in 24 hours
DigiCert: Failure to provide a preliminary report within 24 hours.
SwissSign: failure to provide a preliminary report within 24 hours