TunTrust CP/CPS Markdown publication omitted required policy adherence statements

TunTrust reported that a third party notified it that the Markdown version of its published CP/CPS did not include explicit statements of adherence to the Chrome Root Program Policy and CCADB Policy. TunTrust verified that the approved PDF version did contain the required statements, and said the issue was limited to the separately prepared Markdown publication. The Markdown version was corrected and republished on 2026-09-17. TunTrust stated that certificate issuance continued and that no certificates were affected. The thread also notes that TunTrust began a broader review of its published CP/CPS versions and publication verification process.

1. 2025-12-01 CP/CPS version 6.1.1 was approved with the required policy adherence statements in the PDF version.
2. 2026-06-15 Chrome Root Program Policy v1.8 §1.1.3 became effective.
3. 2026-09-15 CCADB Policy v2.1 §4 became effective.
4. 2026-09-16 A third party notified TunTrust that the published Markdown CP/CPS omitted required adherence statements.
5. 2026-09-17 TunTrust published a corrected Markdown version containing the required statements.

1. 2026-09-19 Agence Nationale de Certification Electronique — TunTrust filed a preliminary incident report describing the Markdown/PDF discrepancy and said it would provide a full report within 14 days.
2. 2026-09-30 Agence Nationale de Certification Electronique — TunTrust submitted the full incident report, confirmed the issue was limited to the Markdown publication, and said issuance continued.
3. 2026-10-09 Community commenter — A commenter noted that no update had been posted in the last 7 days.
4. 2026-10-10 Agence Nationale de Certification Electronique — TunTrust posted an actions-item status update and repeated the full incident report details.
5. 2026-10-17 Agence Nationale de Certification Electronique — TunTrust posted another actions-item status update repeating the same incident details.