← Entrust cases
Bugzilla #1728796
Certificate Misissuance
Entrust: Incorrect value in Business Category field for Government Entities
RESOLVED
FIXED
Entrust
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
Entrust discovered that two Extended Validation (EV) profiles had incorrect Business Category values set to 'Private Organization' instead of 'Government Entity' during a re-validation process on September 1, 2021. The CA promptly notified the affected subscribers that the certificates must be revoked and replaced within five days. All four certificates issued with the incorrect Business Category were revoked ahead of schedule on September 3, 2021. Entrust has since corrected the EV profiles and implemented system enhancements to prevent similar issues in the future. The bug has been resolved as fixed.
Chronology
- Entrust discovered incorrect Business Category values during re-validation.
- All four certificates with incorrect values were revoked.
- New feature to prevent similar issues was released to production.
Thread Activity
- Entrust representative — Entrust's verification team discovered incorrect EV profiles during re-validation.
- Entrust representative — Clarified the number of incorrect EV profiles from 3 to 2.
- Entrust representative — UI changes have been implemented and are in the QA process.
- Entrust representative — The new feature has been released to production as planned.
Participants
Entrust representative
Mozilla representative
External References
Similar Local Cases
Entrust: SSL Certificates issued with Un-verified IP Addresses
Entrust: S/MIME mailbox address case mismatch between subject and subjectAltName
Entrust: Invalid localityName
Entrust: S/MIME mailbox address not in subjectAltName
Entrust: Delay in Updating CPS
Entrust: CPS typographical (text placement) error
Entrust: Incorrect Business Category Value Discovered in an EV SSL Certificate
Entrust: clientAuth TLS Certificates without serverAuth EKU