← Entrust cases
Bugzilla #1712106
Ca Certificate Compliance
Certificate Misissuance
Revocation Issue
Entrust: Invalid localityName
RESOLVED
FIXED
Entrust
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
Entrust identified a compliance issue involving two certificates issued with invalid localityName data, following a third-party report received on May 19, 2021. The CA confirmed the need for revocation and successfully revoked the certificates by May 24, 2021. Entrust has since updated its certificate profile to prevent further misissuance and is implementing enhancements to its verification systems to detect potential errors in locality data. The new address validation system, based on Universal Postal Union data, was released in December 2021 to improve accuracy in locality information.
Chronology
- Entrust received a certificate problem report regarding invalid localityName data.
- Entrust revoked the two certificates with invalid localityName.
- Entrust released a new address validation system to improve locality data accuracy.
Thread Activity
- Entrustdatacard representative — Entrust confirmed the need to revoke two certificates due to invalid localityName data.
- Entrustdatacard representative — Entrust reported the revocation of the two certificates.
- Entrust representative — Entrust announced the successful release of the new address validation feature.
Participants
Entrustdatacard representative
Community commenter
Entrust representative
Mozilla representative
External References
Similar Local Cases
Entrust: S/MIME mailbox address not in subjectAltName
Entrust: S/MIME mailbox address case mismatch between subject and subjectAltName
Entrust: Incorrect Business Category Value Discovered in an EV SSL Certificate
Entrust: SSL Certificates issued with Un-verified IP Addresses
Entrust: EV Certificates Issued with Business Category "Non-Commercial" when it should have been set to "Private Organization"
Entrust: S/MIME certificates lacking OU verification
Entrust: EV TLS Certificate incorrect jurisdiction
Entrust: S/MIME Certificate Issued with Incorrect Policy OID