D-TRUST: Precertificate OU > 64 Characters

D-TRUST identified a compliance issue where the Organizational Unit (OU) name in precertificates exceeded the maximum allowed length of 64 characters. The issue was discovered by internal quality assurance on July 5, 2019, prompting immediate action to stop issuing certificates. D-TRUST implemented corrective measures, including shutting down the affected application processing system and revoking the defective precertificates. A thorough analysis revealed that the failure stemmed from inadequate field length checks for precertificates. The CA has since enhanced its controls and monitoring procedures to prevent similar issues in the future.

1. 2019-07-05 Internal quality assurance noticed the error and stopped issuing certificates.
2. 2019-07-15 Defective precertificates were revoked.
3. 2019-07-24 Final incident report published detailing the issue and corrective actions.

1. 2019-07-05 Bdr representative — Internal quality assurance noticed the error and initiated an incident response.
2. 2019-07-12 Bdr representative — Management decided to shut down the affected application processing website.
3. 2019-07-15 Bdr representative — Both defective precertificates were revoked.
4. 2019-07-24 Bdr representative — Final incident report published with a detailed analysis and corrective actions.