Entrust: EV Certificates Issued with Business Category "Non-Commercial" when it should have been set to "Private Organization"

Entrust disclosed a compliance issue regarding 31 EV SSL certificates that were incorrectly issued with the Business Category 'Non-Commercial Entity' instead of 'Private Organization'. The issue was identified on November 25, 2019, following a notification from a third party. Entrust conducted an internal review, confirmed the misissuance, and updated the affected customer accounts. All problematic certificates were revoked by November 29, 2019. Entrust has since implemented an allow list for Non-Commercial Entities and updated their training processes to prevent future occurrences.

1. 2019-11-25 Entrust received notification of misissued EV SSL certificates.
2. 2019-11-29 All 31 misissued certificates were revoked.

1. 2019-11-26 Entrustdatacard representative — Entrust confirmed the misissuance of 31 certificates and detailed the timeline of their response.
2. 2019-12-20 Entrustdatacard representative — Entrust obtained a list of Non-Commercial Entities and added them to their high-risk organization list.
3. 2020-01-31 Entrustdatacard representative — Entrust completed the verification process for their Non-Commercial Entities allow list.