Entrust: Certificate issued with '-' in ST field

Entrust discovered a compliance issue where an SSL certificate was issued with a '-' character in the ST field of the subject DN, violating CA/B Forum Baseline Requirements. The issue was identified on November 20, 2018, just one day after the certificate was issued on November 19, 2018. Entrust initiated an investigation and updated their processes to prevent future occurrences. The problematic certificate was revoked on November 26, 2018. Remediation steps included alerting the verification team and implementing software changes to block invalid ST attributes. The issue has since been addressed with pre-issuance linting as of May 14, 2019.

1. 2018-11-19 Certificate issued with '-' in ST field
2. 2018-11-20 Miss-issuance detected and investigation started
3. 2018-11-26 Miss-issued certificate revoked
4. 2019-05-14 Remediation completed with pre-issuance linting

1. 2018-12-04 Entrust representative — Reported the certificate issuance issue and the steps taken.
2. 2018-12-04 Community commenter — Requested a detailed timeline and expressed concerns about the verification process.
3. 2019-01-14 Community commenter — Inquired about updates on the incident report.
4. 2019-05-15 Fastly representative — Confirmed that remediation has been completed.