Entrust: Issued Certificates to incorrect Organization

Entrust Datacard identified a compliance issue where it issued OV SSL certificates with incorrect organization names due to a human error in updating account information. The issue was first noticed on March 7, 2019, and upon confirmation on March 8, 2019, Entrust began investigating to ensure no other accounts were affected. The CA reported the issue and scheduled revocation of the impacted certificates, which were successfully revoked by March 20, 2019. Entrust has since updated its procedures to ensure timely reporting and revocation in future incidents.

1. 2018-12-14 Customer requested a change in contact information, leading to incorrect organization name updates.
2. 2019-03-08 Entrust confirmed the error and began corrective actions.
3. 2019-03-20 All impacted certificates were successfully revoked.

1. 2019-03-15 Entrust representative — Entrust issued OV SSL certificates with the wrong organization name due to a mistake in updating account information.
2. 2019-03-19 Entrustdatacard representative — Confirmed that the investigation was completed and revocation of affected certificates was scheduled.
3. 2019-03-25 Entrustdatacard representative — All certificates listed were successfully revoked on or before March 20th.
4. 2019-06-27 Entrust representative — CPS section 4.9.3 has been updated to reflect new procedures.