iTrusChina: Finding in Routine WebTrust Audit - Domain validation records without the TLS BR version

During the 2025 WebTrust audit, iTrusChina was informed that its domain validation records did not include the required TLS Baseline version, violating WebTrust for CA – TLS Baseline V2.9. In response, iTrusChina halted new TLS certificate issuance and initiated a root cause analysis. The issue stemmed from a misunderstanding of TLS BR requirements and flaws in the RA system design. iTrusChina has since updated its RA system to ensure compliance and trained its staff on the necessary requirements.

1. 2018-07-31 Non-compliance start date
2. 2026-01-30 Non-compliance identified date
3. 2026-02-02 Internal departments began root cause analysis
4. 2026-02-05 RA system updated to fix the problem
5. 2026-04-24 Report Closure Summary submitted