The Librem 5 probably already has the CE marking, because it basically self-certified. The manufacturer simply has to submit a document saying that their product confirms with the relevant regulations of the EU, but no body has to test the device to verify that they followed those regulations. If they are caught having not followed the regulations, however, it is a criminal offense.
Here is what Wikipedia says:
The CE mark on a product indicates that the manufacturer or importer of that product affirms its compliance with the relevant EU legislation and the product may be sold anywhere in the European Economic Area (EEA). It is a criminal offence to affix a CE mark to a product that is not compliant or offer it for sale.[5]
For example, most electrical products must comply with the Low Voltage Directive and the EMC Directive, among others; toys must comply with the Toy Safety Directive. (The Low Voltage Directive is about electrical safety; EMC or Electromagnetic Compatibility[6] means the device will work as intended without interfering with, or being affected by, the use or function of any other device.) The CE mark indicates compliance with as many Directives as apply at the time of the declaration of compliance (see below). In the case of electrical products, several later Directives such as the Restriction of Hazardous Substances Directive (RoHS) and Waste Electrical and Electronic Equipment Directive (WEEE) are relevant in addition to the Low Voltage Directive and EMC Directive. The exact significance of the CE mark therefore depends on when it was applied to a specific unit.
The marking does not indicate EEA manufacture or that the EU or another authority has approved a product as safe or conformant.[7]
Obtaining FCC certification should be a fast process as long as the Librem 5 isn’t doing anything wrong. For a device using RF components that are already FCC certified, it usually takes 3-5 weeks for a testing company to test the device and then it submits its test results to one of the authorized certifying companies, which takes another 1-2 weeks. Considering that Purism posted photos of an Evergreen prototype on Aug. 28, 2020 with the longer case (and presumably with longer antennas for better RF reception), I expected Purism to already have the FCC certification by now. However, Purism only posted about its larger 4500 mAh on Nov 12, so it could be that it only recently got a prototype with the larger battery that it could send in for FCC testing. If Purism sent in a device for FCC testing in the first week of November, it should have the FCC certification by the middle of December, as long as the testing doesn’t find anything wrong.
Still, the lack of FCC certification does explain why Purism is only sending out a small number of Evergreens to the early backers and why Purism is using JIT manufacturing so that it can adjust the design in case the testing finds something wrong in the design.
As for why Purism only let the early backers know in an email and didn’t announce it in their Shipping FAQ on Nov 3 or shipping announcement on Nov 18, I assume that Purism is trying to generate new Librem 5 orders with the news that Evergreen is shipping. We know that the development of the Librem 5 went way over budget, so I’m not going to be too hard on the company for trying to boost the phone sales now. For people who are thinking of ordering today, this isn’t very important info, because the phone will have FCC certification by the time they get it and it is unlikely to have any influence over how long it takes to get the phone. Only if they want to check the SAR level of the phone do I think that people ordering today should care, and if they care about that, then they will have already checked the FCC website and seen that Purism hasn’t yet submitted its application. Far more relevant info for people ordering today is the current battery life, progress on the cameras and smart card reader in the kernel, which apps have been adapted for the Librem 5, which software has been adapted to use the sensors, UI improvements in Phosh, etc.
The issue as @eugenr pointed out is the erosion of trust when Purism isn’t up front about these issues.