D-Trust: Third-party report about CPS URL mismatch in CCADB export for six S/MIME CA records
This case concerns a third-party Certificate Problem Report about six D-Trust CA certificate records in CCADB whose CPS disclosures appeared inconsistent in a public export. D-Trust said the report was received on 2026-09-25 and opened an investigation into the discrepancy. In its initial review, D-Trust found that the CCADB entries themselves showed CPS disclosures, while the public export did not reflect them correctly. D-Trust later changed the records to use the `CPS Same as Parent` flag and removed the separately recorded CPS URLs so the public export would show the inheritance configuration. D-Trust stated that no certificate misissuance occurred and that the issue was not a policy-disclosure failure on its part, while also noting that the export discrepancy itself remained unexplained. The report was requested to be closed as invalid, and CCADB incident-reporting indicated a final call for comments with closure expected around 2026-10-19.
- D-Trust received a third-party CPR about CPS disclosure inconsistencies for six CA certificate records in CCADB.
- D-Trust confirmed the records had CPS URLs in CCADB and changed them to use `CPS Same as Parent` for the public export.
- D-Trust requested closure of the report as invalid and said no misissuance had been identified.
- CCADB incident-reporting issued a final call for comments and said the report would be closed around 2026-10-19.
- Bdr representative — D-Trust filed a preliminary incident report describing the third-party CPR, the affected CCADB records, and the mismatch between CCADB entries and the public export.
- D-Trust — D-Trust said the records had CPS URLs in CCADB, changed them to `CPS Same as Parent`, and suggested the export discrepancy might be a CCADB defect.
- D-Trust — D-Trust requested closure as invalid, said the discrepancy was not substantiated as a policy-disclosure failure, and noted the export issue remained unresolved technically.
- CCADB representative — CCADB incident-reporting posted a final call for comments or questions and said the report would be closed on approximately 2026-10-19.