← Entrust cases
Bugzilla #1512018
Certificate Problem Report
Entrust: Certificate issued with '-' in ST field
RESOLVED
FIXED
Entrust
AI Summary
Entrust issued an SSL certificate on November 19, 2018, containing a '-' character in the ST field, which violates the Baseline Requirements. The issue was detected the following day, prompting an investigation and subsequent process changes. The problematic certificate was revoked on November 26, 2018, after a delay attributed to procedural oversights. Entrust has since implemented measures to prevent similar occurrences, including enhanced verification processes and pre-issuance linting.
Chronology
- Certificate issued
- Miss-issuance detected
- Investigation started
- Miss-issued certificate revoked
Participants
Bruce Morton
Ryan Sleevi
External References
Similar Local Cases
Entrust: SSL Certificates issued with Un-verified IP Addresses
Entrust: Incorrect keyUsage for ECC certificate
Entrust: Late revocation of underscore certificate
Entrust: S/MIME Certificate Issued with Incorrect Policy OID
Entrust: IP Address in dNSName form
Entrust: Failure to revoke a certificate
Entrust: Printable String Constraint Failure
Entrust: Late Revocation for SSL Certificates issued with Un-verified IP Addresses