iTrusChina: Finding in Routine WebTrust Audit - Domain validation records without the TLS BR version

During the 2025 WebTrust annual audit, iTrusChina discovered that its domain validation records lacked the required TLS Baseline version, violating WebTrust and TLS BR requirements. In response, iTrusChina halted new certificate issuance and initiated an investigation into the root causes. The audit finding was disclosed, and a full incident report was provided, detailing the non-compliance period and corrective actions taken. The RA system was updated to include the TLS BR version number for domain validations, and staff training was conducted to improve understanding of compliance requirements. The case has been resolved with all action items completed.

1. 2026-01-30 iTrusChina was notified of non-compliance during the WebTrust audit.
2. 2026-02-05 iTrusChina updated the RA system to fix the issue.
3. 2026-04-24 iTrusChina submitted a report closure summary and requested closure of the incident.

1. 2026-02-02 iTrusChina Co., Ltd. — iTrusChina reported the incident discovered during the WebTrust audit.
2. 2026-02-07 iTrusChina Co., Ltd. — iTrusChina provided a full incident report detailing the findings.
3. 2026-04-24 iTrusChina Co., Ltd. — iTrusChina submitted the report closure summary and confirmed all actions were completed.