← IdenTrust Services, LLC cases
Bugzilla #1398255
Certificate Problem Report
IdenTrust: Non-BR-Compliant OCSP Responders
RESOLVED
FIXED
IdenTrust Services, LLC
AI Summary
IdenTrust faced issues with its OCSP responders not complying with the Baseline Requirements (BR) regarding unissued certificates. The problem was identified in August 2017, and IdenTrust promptly remediated the issue by updating its OCSP responder configuration. The non-compliance was due to legacy software that had not been updated since the BRs were enacted. The incident was resolved by August 30, 2017, and IdenTrust confirmed that it ceased issuing non-compliant OCSP responses. The case serves as a record of the incident and the corrective actions taken.
Chronology
- IdenTrust notified of OCSP compliance issue.
- IdenTrust completed remediation of OCSP responders.
Participants
Kathleen Wilson
Vishvas Patel
Gerv
External References
Similar Local Cases
IdenTrust: Non-BR-Compliant Certificate Issuance
StartCom: IV without localityName or stateOrProvinceName
Let's Encrypt: Non-BR-Compliant Certificate Issuance
Disig: Non-BR-Compliant OCSP Responders
StartCom: public exponent is 1
Staat der Nederlandend / PKIoverheid: Non-BR-Compliant OCSP Responders
DocuSign/Keynectis: Non-BR-Compliant OCSP Responders
GoDaddy's intermediate CA not in the Mozilla CA bundle