Entrust: Incorrect Jurisdiction Country Value in an EV Certificate

Entrust discovered an issue with an Extended Validation (EV) certificate that contained an incorrect Jurisdiction Country value during an internal review. The problem was identified on March 3, 2021, and the CA confirmed the misissuance of one EV certificate. Entrust took immediate action by updating the Jurisdiction Country value and notifying the subscriber to reissue the certificate. The problematic certificate was revoked on March 5, 2021. Entrust has since implemented system enhancements to prevent similar issues in the future, with all changes completed by June 23, 2021.

1. 2021-03-03 Entrust discovered an EV certificate with an incorrect Jurisdiction Country value.
2. 2021-03-05 The problematic certificate was revoked.
3. 2021-06-23 All system enhancements to prevent future issues were fully implemented.

1. 2021-03-03 Entrustdatacard representative — Entrust Verification team discovered an EV certificate with an incorrect Jurisdiction Country value.
2. 2021-03-04 Entrustdatacard representative — A timeline of actions taken in response to the discovery was provided.
3. 2021-03-09 Entrustdatacard representative — The certificate was revoked on March 5, 2021.
4. 2021-06-23 Entrustdatacard representative — All system enhancements described in the report have been fully implemented.
5. 2021-07-12 Mozilla representative — Discussion on closing the bug was initiated.