Entrust: Question marks in certificate O and L fields

Entrust disclosed a compliance issue regarding a miss-issued SSL certificate that contained question marks in the Organization (O) and Locality (L) fields instead of the expected Unicode characters. The issue was discovered internally during a verification review and was promptly addressed by revoking the certificate and deploying a patch to correct the underlying bug. Entrust acknowledged a lack of transparency in not filing a miss-issue report at the time of discovery. They have since implemented additional monitoring and linting processes to prevent similar issues in the future. The case has been resolved with the necessary corrective actions taken.

1. 2018-07-05 Certificate issued with incorrect data
2. 2018-07-06 Certificate revoked after discovery of the issue
3. 2018-08-02 Patch deployed to fix the bug

1. 2019-05-17 Entrust representative — Entrust reported the miss-issue and provided details on the discovery and resolution process.
2. 2019-05-27 Fastly representative — Wayne Thayer acknowledged the report and requested further details regarding the transparency of the incident.
3. 2019-06-28 Fastly representative — Wayne Thayer confirmed that remediation is completed.