← Entrust cases
Bugzilla #1685370
Ca Certificate Compliance
Certificate Misissuance
Revocation Issue
Entrust: Incorrect Business Category Value Discovered in an EV SSL Certificate
RESOLVED
FIXED
Entrust
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
Entrust discovered an incorrect business category value in an EV SSL certificate during a routine re-validation process. The issue stemmed from an inadvertent change made during a contact update in 2019, which led to the mis-issuance of the certificate on March 18, 2020. Upon discovery on January 5, 2021, Entrust initiated an internal investigation and confirmed the issue. The affected certificate was revoked within the required timeframe. Entrust has since corrected the business profile and implemented UI changes to prevent future occurrences. The bug has been resolved with all necessary actions taken.
Chronology
- Entrust discovered the incorrect business category value during an EV re-validation.
- The affected certificate was revoked.
- Entrust implemented UI changes to enhance verification processes.
Thread Activity
- Entrustdatacard representative — Entrust reported the discovery of an incorrect business category value during an EV re-validation.
- Community commenter — Expressed encouragement regarding Entrust's incident reporting improvements.
- Entrustdatacard representative — Confirmed that all system enhancements related to the incident have been fully implemented.
Participants
Entrustdatacard representative
Community commenter
Mozilla representative
External References
Similar Local Cases
Entrust: S/MIME mailbox address not in subjectAltName
Entrust: S/MIME mailbox address case mismatch between subject and subjectAltName
Entrust: Invalid localityName
Entrust: EV Certificates Issued with Business Category "Non-Commercial" when it should have been set to "Private Organization"
Entrust: EV TLS Certificate incorrect jurisdiction
Entrust: SSL Certificates issued with Un-verified IP Addresses
Entrust: S/MIME Certificate Issued with Incorrect Policy OID
Entrust: S/MIME certificates lacking OU verification