IdenTrust: Discrepancy in values of address fields within CN of SSL Certificates

IdenTrust identified a discrepancy in the address fields of 12 SSL certificates during an internal review on February 4, 2019. The issue arose from a specific renewal process that incorrectly updated the certificate data. All affected certificates were revoked within four days, and the CA ceased issuing certificates with this issue immediately. A procedural fix was implemented on February 5, 2019, to ensure that only the organization's main address is used in future renewals. A root cause analysis was conducted, confirming that the misconfiguration had been in place since before the Baseline Requirements v1.0.

1. 2019-02-04 Discrepancy discovered during internal review
2. 2019-02-05 Procedural fix implemented to prevent future discrepancies
3. 2019-02-12 Root Cause Analysis Report completed
4. 2019-07-01 Remediation confirmed complete