Actalis failure to timely update CP/CPS documents for AgID sub-CAs
This case concerns Actalis’s failure to publish updated CP/CPS documents for the AgID SSL Server CA and AgID CA1 subordinate CAs within the required annual timeframe. Actalis said the issue was identified after a third-party notification, and the updated documents were then published on AgID’s GitHub repository and public website. The corresponding CCADB records were also updated, and Actalis stated that no end-user certificates were impacted and issuance was not stopped. The full incident report says the non-compliance started on 2026-07-10 and ended on 2026-07-22. The thread records that Actalis completed its internal analysis, published the full incident report, and has continued posting weekly updates saying it is on track with the planned action items and monitoring the bug. The bug remains open and assigned as of the latest update on 2026-09-02.
- The annual publication deadline for the applicable CP/CPS documents was missed.
- Updated CP/CPS documents were published for the AgID SSL Server CA and AgID CA1 sub-CAs.
- Corresponding CCADB records were updated and the non-compliance ended.
- Staff representative — Opened a preliminary incident report saying the published CPS was older than 365 days, the updated documents and CCADB information were published, no end-user certificates were impacted, and a full report would follow.
- Staff representative — Said internal analysis was continuing and that the full incident report would be published within the expected timeline.
- Staff representative — Published the full incident report stating the bug was about failure to publish CP/CPS documents within the required annual timeframe and that the issue was limited to document maintenance and disclosure.
- Staff representative — Said Actalis was on track with the planned action items and was continuing to monitor the bug.
- Staff representative — Repeated that Actalis was on track with the planned action items and was continuing to monitor the bug.
- Staff representative — Repeated that Actalis was on track with the planned action items and was continuing to monitor the bug.
- Staff representative — Repeated that Actalis was on track with the planned action items and was continuing to monitor the bug.