2082799 - Telekom Security: Typographical error in CPS section 7.1.6

Status: ASSIGNED

(CA Program :: CA Certificate Compliance, task)

Description

[Arnold Essing]

Preliminary Incident Report

Summary

• Incident description:
  We received a problem report by a third party informing us about a typographical error in section 7.1.6 of our Telekom Security CPS Public (version 10.00 till 12.00). In particular, our CPS states:

  The respective policy OIDs according to [BR] resp. [EVCG] are set:
  EV 2.23.140.1.1
  DV 2.23.140.2.1
  OV 2.23.140.2.2

  As the third party reported: “2.23.140.2.1 and 2.23.140.2.2 are not the Baseline Requirements identifiers. The BR identifiers are 2.23.140.1.2.1 (domain validated) and 2.23.140.1.2.2 (organization validated).” Our certificates carry the respective policy OIDs according to the Baseline Requirements as stated at the beginning of the paragraph.

  We released a new CPS version 13.00 in which the typo has been fixed.

• Relevant policies:
  Telekom Security CPS Public version 10.00 till 12.00 Section 7.1.6
  CA/Browser Forum Baseline Requirements Section 7.1.6

• Source of incident disclosure:
  Third Party Reported