D-TRUST third-party CPR about outdated CPS effective dates in CCADB subordinate CA records
This case concerns a third-party Certificate Problem Report alleging that four D-Trust subordinate CA records in CCADB show outdated CPS effective dates. The reporter compared the public CCADB export dated 2026-10-16 with policy documents retrieved from the listed URLs and identified four records with older effective dates than the documents they referenced. D-Trust said it would review the complete policy-document entries for those records and compare them with the public export and the documents applicable on the export date. The report states that the CPR does not identify certificate misissuance, and that the technical cause and any wider impact remain unconfirmed. D-Trust also noted a prior bug, 2076193, where CPS disclosures for other CA certificates were omitted from the public export. The ticket remains ongoing while D-Trust publishes findings and any scope changes.
- A third-party CPR was filed about outdated CPS effective dates in CCADB subordinate CA records.
- D-Trust opened the Mozilla bug and began reviewing the affected CCADB policy-document entries.
- D-Trust — D-Trust filed a preliminary incident report describing the third-party CPR, the four affected CCADB records, the cited policy documents, and the planned review.