Entrust: Certificate issued with validity greater than 825-days

Entrust Datacard discovered a compliance issue involving the issuance of certificates with a validity period exceeding 825 days during internal testing on June 21, 2019. Upon discovery, the CA revoked the two affected certificates within hours. Further investigation revealed a total of five certificates were mis-issued due to manual errors in the issuance process. Entrust has since implemented a new procedure to prevent future occurrences and has ceased issuing certificates with incorrect validity periods. The issue has been resolved, and the CA has completed the necessary remediation steps.

1. 2019-06-21 Entrust issued two certificates with a validity period greater than 825 days.
2. 2019-06-21 Entrust discovered the issue and revoked the certificates.
3. 2019-12-04 Entrust completed the deployment of the new procedures to prevent future mis-issuances.

1. 2019-06-24 Entrust representative — Entrust reported the issuance of an EV SSL certificate for 3 years, exceeding the allowed validity period.
2. 2019-06-27 Entrust representative — Entrust updated the report to indicate five certificates were mis-issued due to the same root cause.
3. 2019-12-04 Entrust representative — Entrust confirmed that the release accommodating the new procedures has been deployed.