← D-TRUST cases
Bugzilla #2011430
CCADB Compliance
D-Trust: Delayed publication of audit attestation letters in the CCADB
ASSIGNED
D-TRUST
AI Summary
D-Trust failed to upload the required Audit Attestation Letters (AALs) to the CCADB within the mandated 92-day deadline following the end of the audit period. The deadline expired on January 7, 2026, but the AALs were only uploaded on January 19, 2026. This delay necessitated D-Trust to obtain an explanatory letter from their auditor, TÜV NORD CERT GmbH, to comply with CCADB Policy. The incident was self-reported by D-Trust and has prompted discussions on improving internal processes to ensure timely submissions in the future.
Chronology
- CCADB submission deadline expired
- Audit Attestation Letters uploaded to CCADB
- Explanatory letter sent by auditor regarding the delay
Participants
Ana Laura Martorano
CCADB Support
TÜV NORD CERT GmbH
External References
Similar Local Cases
Chunghwa Telecom: Delayed audit disclosure for GTLSCA
eMudhra emSign PKI Services : Delayed Publication of Issuing CA Certificates in CCADB
Chunghwa Telecom: Delayed Annual Audit Report 2024
FNMT: Delayed Disclosure of Updated Policy Documents in the CCADB
ANF AC: Delayed Disclosure of Updated Policy Documents in CCADB
Microsoft PKI Services: Failure to report Bugzilla 2026452 within 72 hrs
Sectigo: Late CCADB update after CPS update
DigiCert: Late CP/CPS CCADB uploads