← IdenTrust Services, LLC cases
Bugzilla #1718552
Certificate Misissuance
IdenTrust: Certificates with Invalid values for stateOrProvinceName
RESOLVED
FIXED
IdenTrust Services, LLC
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
IdenTrust Services, LLC reported a compliance issue involving several of their OV SSL certificates that contained invalid values in the 'stateOrProvinceName' field. The issue was first identified on June 28, 2021, following a report from Entrust. In response, IdenTrust confirmed the problem, revoked 40 affected certificates by June 30, 2021, and deployed a code fix to prevent recurrence. The root cause was identified as a software bug introduced in February 2019, which allowed 'Not Applicable' to be erroneously included in the certificates. IdenTrust has since implemented additional testing measures to avoid similar issues in the future.
Chronology
- IdenTrust received a report about invalid values in the 'stateOrProvinceName' field of several SSL certificates.
- IdenTrust revoked 40 affected SSL certificates.
- IdenTrust provided a formal incident report detailing the issue and corrective actions.
- IdenTrust implemented a code update to prevent future occurrences of the issue.
Thread Activity
- IdenTrust Services, LLC — IdenTrust acknowledged the issue and stated they would provide a formal incident report by July 2, 2021.
- IdenTrust Services, LLC — IdenTrust confirmed the issue and scheduled the revocation of affected certificates.
- IdenTrust Services, LLC — IdenTrust submitted a detailed incident report outlining the timeline and corrective actions taken.
- Community commenter — Feedback was provided regarding the incident report's lack of clarity on root causes.
- IdenTrust Services, LLC — IdenTrust requested consideration for closing the report after addressing feedback.
Participants
IdenTrust Services, LLC
Community commenter
Mozilla representative
External References
Similar Local Cases
IdenTrust: Issuance of certificates greater than 398 days
IdenTrust: unintended creation of a Root CA certificate
IdenTrust: Invalid special characters in S/MIME Certificates
IdenTrust: Approval of TLS certificate renewal without domain validation
IdenTrust: EV TLS certificate with invalid Jurisdiction state for government entity
IdenTrust: EV TLS certificate with wrong jurisdiction state for private organization
IdenTrust: duplicate Certificate in error flagged by OCSP Watch
IdenTrust: S/MIME certificates issued in violation of New S/MIME Baseline Requirements v1.0