Identrust TrustID Subordinate CA - Revocation Notification

IdenTrust reported revoking two subordinate CAs as part of its normal business cycle due to the cessation of operations. The revocations were for subordinate CAs signed with SHA-1 that were no longer needed. In the CCADB/OneCRL records, one subordinate CA revocation was already reflected with OneCRL status “Ready to Add,” while a second version of “TrustID CA A51” had not yet been revoked and therefore had not been added to OneCRL. Kathleen Wilson asked whether the other “TrustID CA A51” certificate instance should also be revoked and requested an update to the Common CA Database if so. IdenTrust confirmed that the second copy of the subordinate CA was revoked that day and stated it would update the Common CA Database accordingly. The bug is marked RESOLVED with resolution FIXED.

1. 2017-06-07 IdenTrust revoked two subordinate CAs due to cessation of operations.
2. 2017-06-20 A CCADB/OneCRL status question was raised about whether a second instance of TrustID CA A51 had been revoked and added to OneCRL.
3. 2017-06-28 IdenTrust confirmed the second copy of TrustID CA A51 was revoked and would update CCADB accordingly.

1. 2017-06-15 IdenTrust Services, LLC — IdenTrust notified Mozilla that it revoked two subordinate CAs on June 7, 2017 due to cessation of operations and provided the CRL location for the issuing root.
2. 2017-06-20 Mozilla representative — Kathleen asked whether the other version of the TrustID CA A51 certificate should also be revoked, noting CCADB/OneCRL status differences.
3. 2017-06-28 Mozilla representative — Kathleen reiterated that the second TrustID CA A51 instance had not been revoked and requested an update to CCADB if it would be revoked.
4. 2017-06-28 IdenTrust Services, LLC — IdenTrust confirmed the second copy of the subordinate CA was revoked and said it would update the Common CA Database accordingly.