eMudhra emSign PKI Services: CP/CPS documents not updated for current requirements

This case is a preliminary incident report about CP/CPS documents that were said to contain statements not reflecting current requirements. The report names the InCommon IGTF CPS v3.04 and the emSign PKI CP/CPS v1.25, and says the mismatches involve authorized ports, CAA lookup failure handling, the number of network perspectives used for MPIC, and the minimum RSA key size for S/MIME CA keys. The reporter identified the source as a third-party report. The thread does not include any remediation, closure, or follow-up action beyond noting that details will be provided in a full incident report.

1. 2026-10-16 A third-party-reported compliance issue was opened concerning CP/CPS statements that did not reflect current requirements.

1. 2026-10-16 Emudhra representative — Filed a preliminary incident report stating that the InCommon IGTF CPS and emSign PKI CP/CPS contain outdated or incorrect requirements statements.