Amazon Trust Services incident report: CP/CPS updates for externally operated subordinate CAs were not uploaded to CCADB within 14 days
Amazon Trust Services reported that it failed to update the CP/CPS on CCADB subordinate records for externally operated subordinate CAs within the 14-day deadline required by CCADB Policy. The report says the non-compliance began on 2026-09-17 and was identified and ended on 2026-09-21. ATS stated that no certificates were impacted and that issuance was not stopped because the policy document was already available in the repository and linked to the other applicable subordinates. ATS said the miss happened because the normal notification process was interrupted and no follow-up tracking item was created. ATS updated the affected subordinate records on 2026-09-21 and later updated its runbook to allow out-of-band high-priority tracking for CCADB updates. The bug was marked RESOLVED with FIXED.
- The 14-day CCADB deadline for updating the subordinate CP/CPS records was reached.
- ATS identified the missing CCADB updates and updated the affected subordinate records.
- CCADB incident reporting indicated the case would be closed if there were no further comments.
- DigiCert — ATS filed a full incident report stating that externally operated subordinate CA CP/CPS updates were not uploaded to CCADB within 14 days and cited CCADB Policy section 4.
- DigiCert — ATS posted a closure summary saying the records were updated, the runbook was changed, and all action items were completed.
- CCADB representative — CCADB incident reporting issued a final call for comments or questions before closure.