D-TRUST: Certificate with RSA key where modulus is not divisible by 8

D-TRUST reported an incident involving a certificate issued with an RSA key whose modulus was not divisible by 8, violating Mozilla Root Store Policy and CA/Browser Forum Baseline Requirements. The issue was identified through a third-party report, leading to an immediate investigation and subsequent revocation of the affected certificate. D-TRUST has implemented measures to prevent future occurrences, including pre-issuance checks and updates to their specification documents. The affected certificate was issued on February 14, 2019, and was the only one identified with this problem.

1. 2021-02-05 Initial report received
2. 2021-02-05 Investigation started
3. 2021-02-05 Preliminary internal feedback received
4. 2021-02-05 Subscriber informed about the incident
5. 2021-02-09 Affected certificate revoked
6. 2021-02-10 Final incident report published