Thailand NRCA explanation for delayed WebTrust Assurance reports and follow-up letters
This case concerns Thailand National Root Certificate Authority (ETDA) explaining delays in submitting WebTrust Assurance Reports in the CA Documents component. ETDA first said the delay affected the audit period from September 2024 to January 2025 and attributed it to unforeseen audit-process issues, including a transition of its WebTrust Practitioner’s License to BDO Malaysia. In October, a commenter noted that the bug’s attachment covered one statement period but that two later CCADB statement periods also appeared overdue. ETDA then apologized for the oversight, said it had uploaded the required letter for Thai Digital ID CA G3, and said it would coordinate with NTCA for an explanatory letter if one was required for NTCA G2 and G3. The latest comment says the Thai Digital ID CA G3 letter has been recorded, while the need for an NTCA letter is for the root programs to decide. The bug remains open and assigned.
- ETDA submitted an explanatory letter about delayed WebTrust Assurance Reports for the September 2024 to January 2025 audit period.
- A later review identified two additional overdue CCADB statement periods for related intermediates.
- ETDA uploaded a further explanatory letter for Thai Digital ID CA G3 and said it would seek an NTCA letter if needed.
- Etda representative — Submitted an attachment explaining the delay in ETDA’s WebTrust Assurance Reports and cited the license transition to BDO as the main reason.
- Etda representative — Referenced CCADB Case 00003090 and provided WebTrust seal URLs for WTCA, NS, and SSLBR.
- CCADB representative — Recorded the CCADB CA Owner ID as A002587.
- Markovianprotocol representative — Noted that the attached letter covered one statement period and asked whether letters for two later periods were available elsewhere.
- Etda representative — Said the Thai Digital ID CA G3 letter had now been uploaded and asked whether an NTCA explanatory letter was required.
- Markovianprotocol representative — Confirmed the Thai Digital ID CA G3 letter was recorded and said the need for an NTCA letter is for the root programs to decide.