← IdenTrust Services, LLC cases
Bugzilla #1598807
Certificate Problem Report
IdenTrust: Undisclosed Unrevoked ICAs
RESOLVED
FIXED
IdenTrust Services, LLC
AI Summary
IdenTrust Services, LLC reported two unrevoked Intermediate Certificate Authorities (ICAs) that were not disclosed in their annual WebTrust audit report. The issue was identified on November 8, 2019, leading to a commitment to revoke these ICAs. Despite the challenges posed by the COVID-19 pandemic, IdenTrust successfully established a private infrastructure and completed the necessary revocation by August 30, 2020. The case was resolved with all planned actions completed.
Chronology
- IdenTrust became aware of the need to revoke two ICAs.
- Revocation of the two ICAs was completed.
Participants
roots@identrust.com
ryan.sleevi@gmail.com
bwilson@mozilla.com
allizom40@tree.tlrmx.org
External References
Similar Local Cases
IdenTrust: Unavailable CRL and OCSP Responders
IdenTrust: TLS Certificates with outdated certificate profile
IdenTrust: Expired CRL served
IdenTrust: S/MIME certificates with Invalid document Identification Scheme
IdenTrust: Unauthorized OCSP response on a Timestamp certificate
IdenTrust: EV TLS certificate with invalid Jurisdiction state for government entity
Apple: EV Certificate Approver Authorization
GoDaddy: Failure to revoke key-compromised certificates within 24 hours