CA/CPS Review

Here are previous reviews of CP/CPS documents:

• Minor set of comments to SwissSign
• Minor set of comments to Czech Post CP
• Comment #9 to Korea MOIS CPS and Comment #15 to Korea MOIS CPS
• Review of Firmaprofesional's CP and CPS (XLS) 2023-12-19
• Review of PostSignum's CP (XLS) 2023-12-12
• Review of Commscope's CP/CPS (XLS) 2023-10-11
• Review of TrustAsia's CP/CPS (XLS) 2023-07-06
• Review of Sectigo's CPS (XLS) 2023-04-14
• Review of Cybertrust Japan's CPS (XLS) 2023-04-19
• Review of SSL.com's CP/CPS 2023-04-21 (XLS)
• Review of ATOS Trustcenter's CPS 2023-04-01 (XLS)
• Second Review of BJCA's CPS
• Review of Fina's CPS and Compliance Self Assessment (XLS)
• Review of Notarius' CPS (email-only)
• Review of Macao Post eSignTrust CPS (email-only)
• Review of DigitalSign's CPS (email-only)
• Review of LAWtrust's CPS (email-only)
• Comments to SERPRO's CPS
• Review of Certainly's CP/CPS (Download full review in XLS attachment)
• Review of SECOM's CPs and CPSes
• Second review of eTugra's CPS
• BR and EV Review on eTugra's CPS (Download full review in XLS attachment)
• BR and EV Review on DigiCert's CP/CPS (Download full review in XLS attachment)
• BR and EV Review on D-TRUST's CP/CPS (Download full review in XLS attachment)
• Detailed Extended Validation Review Feedback to iTrusChina on EV aspects of CP/CPS
• Second Review on ACIN - Global Trusted Sign's CP/CPS
• Detailed BR Review Feedback to Telia on CP/CPS
• BR Review of KIR's CPS
• Detailed BR and EV Review Feedback to ACIN - Global Trusted Sign
• Detailed BR and EV Review Feedback on Firmaprofesional's CPS
• Detailed BR and EV Review Feedback on Chunghwa Telecom's CPS
• Detailed BR Review Feedback to HARICA on CP/CPS
• Detailed Review Feedback to ISRG/Let's Encrypt on CP/CPS
• Detailed Extended Validation Review Feedback to HARICA on EV aspects of CP/CPS
• Detailed BR and EV Review Feedback to Network Solutions on CPS
• Detailed BR and EV Review Feedback to e-commerce monitoring's (GLOBALTRUST2020) CP/CPS
• Detailed BR and EV Review Feedback to Beijing CA on CPS
• Detailed Extended Validation Review Feedback to NetLock on EV aspects of CP/CPS
• Detailed Review Feedback to TunTrust on CP/CPS
• Detailed Review Feedback to ANF on CP/CPS
• Detailed Review Feedback to Digidentity on CP/CPS
• Detailed Review Feedback to iTrusChina on CPS
• Detailed Review Feedback to NAVER Group on CPS
• Detailed Review Feedback to Chunghwa Telecom on CPS
• Initial Review Feedback to SSLCOM Group on CPS
• Detailed Review Feedback to Identrust on CPS
• Detailed Review Feedback to SecureTrust
• Detailed Review Feedback to Certisign
• Detailed Review Feedback on Microsec
• Detailed Review Feedback on Firmaprofesional
• Detailed Review Feedback on certSIGN CA
• Detailed Review Feedback on Dubai Government CA
• Detailed Review Feedback on Microsoft CA
• Detailed Review Feedback on Entrust CA
• Detailed Review Feedback on Hongkong Post CA
• Detailed Review Feedback on eMudhra CA
• Detailed Review feedback on SHECA
• Detailed Review Feedback on Google Trust Services
• Detailed Review Feedback on GlobalSign
• Review Feedback on WISeKey
  • That was after blocking problems with the CP/CPS were resolved.
• Review Feedback on Camerfirma
  • CA may submit new root inclusion request for newly generated root that is fully compliant with Mozilla's Root Store Policy and the BRs.
• Review Feedback on TrustCor
  • CP and CPS documents clear, well written, and they provided sufficient detail to assess the policies in place.
• Review Feedback on Kamu SM (Government of Turkey)
  • CPS document clear and well written
  • New requirements for Domain Validation -- all CAs must update their CP/CPS according to section 3.2.2.4 of version 1.4.1 of the BRs.
• Review Feedback on Guangdong Certificate Authority (GDCA)
  • English translations of documents MUST match the original document.
  • CA is responsible for providing accurate translation.
• Review Feedback on Amazon Trust Services' CP/CPS
  • Amazon was commended for the clarity of their CP and CPS.
• Review Feedback on Japan GPKI's CP/CPS
  • Japan GPKI's CP/CPS did not contain sufficient detail, so discussion put on hold pending updated CP/CPS.
• A-Trust discussion put on hold pending translation of CP/CPS into English.
• Review Feedback on ComSign's CP/CPS
  • ComSign's discussion was put on hold until the CP/CPS is updated to conform to either RFC 2527 or RFC 3647, as required by the Baseline Requirements. And be translated into English.
• Review Feedback on SSC's CP/CPS
  • SSC's discussion was put on hold pending updated CP/CPS.
• Review Feedback on ISRG's CP/CPS
  • ISRG's CP/CPS had enough detail, and there were only minor corrections/clarifications to be made.
• Review Feedback on DocuSign's CP/CPS
  • DocuSign's CP/CPS had enough detail, and there were only minor corrections/clarifications to be made.
• Review Feedback on HARICA's CP/CPS
  • HARICA's CP/CPS had enough detail, and there were only minor corrections/clarifications to be made.
• Review Feedback on LuxTrust's CP/CPS
  • The concerns raised regarding LuxTrust's CP/CPS resulted in the inclusion request being put on hold until the CP/CPS was updated.
• Review Feedback on Krajowa Izba Rozliczeniowa (KIR) CP/CPS
  • KIR updated their CP/CPS according to the review feedback provided in their first discussion
  • Then had to update their CP/CPS again due to feedback in their second discussion.