The CPS must always be a superset of actual practices in a properly running CA. We explain why this is a product of good design.
See All 666 Episodes of "Root Causes: A PKI and Security Podcast"