← Entrust cases
Bugzilla #1685370
Certificate Misissuance
Entrust: Incorrect Business Category Value Discovered in an EV SSL Certificate
RESOLVED
FIXED
Entrust
AI Summary
Entrust identified an incorrect business category value in an EV SSL certificate during a routine re-validation process. The error occurred when a verification agent mistakenly changed the business category from 'Government Entity' to 'Private Organization' during a contact update in 2019. This misissuance led to the issuance of one EV SSL certificate on March 18, 2020. Following the discovery on January 5, 2021, Entrust promptly initiated an internal investigation, confirmed the issue, and revoked the certificate within five days. The business profile has since been corrected, and measures have been implemented to prevent future occurrences.
Chronology
- EV validation performed; correct Business Category set.
- Business category incorrectly changed during contact update.
- EV SSL certificate issued with incorrect Business Category.
- Incorrect Business Category discovered during re-validation.
- Certificate revoked.
Participants
Dathan Demone
Ryan Sleevi
External References
Similar Local Cases
Entrust: EV Certificates Issued with Business Category "Non-Commercial" when it should have been set to "Private Organization"
Entrust: Issued Certificates to incorrect Organization
Entrust: Certificate Issued with Incorrect Country Code
Entrust: Certificate issued with validity greater than 825-days
Entrust: Late mis-issue certificate revocation
Entrust: SHA-1 Issuance and other misissuance while testing
Entrust: Subscriber provides private key with CSR
Entrust: Question marks in certificate O and L fields