Certigna: Failure to respond to CPR within 24 hours

This case involves Certigna's failure to respond to a Certificate Problem Report (CPR) within the required 24-hour timeframe. The issue was reported by a third party on December 6, 2025, regarding a potential non-compliance related to a CA certificate. Certigna acknowledged the report but did not provide a preliminary incident report until December 8, 2025. The CA took corrective actions, including stopping the issuance of certificates under the impacted CA during the correction period. The incident was resolved with improvements to customer service procedures and awareness training to prevent future occurrences.

1. 2025-12-06 Third party submitted a Certificate Problem Report to Certigna.
2. 2025-12-08 Certigna provided a preliminary incident report after the 24-hour deadline.

1. 2025-12-08 Community commenter — Reported the issue and noted lack of communication from Certigna.
2. 2025-12-08 Dhimyotis representative — Provided a preliminary incident report acknowledging the delay.
3. 2025-12-15 Dhimyotis representative — Submitted a full incident report detailing the timeline and corrective actions.
4. 2026-02-20 Dhimyotis representative — Requested closure of the incident report after completing all action items.