← Entrust cases
Bugzilla #1728796
Certificate Problem Report
Entrust: Incorrect value in Business Category field for Government Entities
RESOLVED
FIXED
Entrust
AI Summary
Entrust identified an issue where two Extended Validation (EV) profiles were incorrectly categorized as 'Private Organization' instead of 'Government Entity'. This discrepancy was discovered during a re-validation process on September 1, 2021. The CA promptly notified affected subscribers, setting a revocation deadline for September 6, 2021. All four certificates associated with this issue were revoked ahead of schedule, and corrective measures were implemented to prevent future occurrences. The issue has since been resolved, and the CA has committed to ongoing enhancements to their verification processes.
Chronology
- Incorrect Business Category values discovered during re-validation.
- Revocation deadline set for affected certificates.
- All four certificates revoked ahead of schedule.
- New feature to prevent similar issues released to production.
Participants
Paul van Brouwershaven
External References
Similar Local Cases
Entrust: delayed revocation
Entrust: Incorrect Jurisdiction Country Value in an EV Certificate
Entrust: Incorrect keyUsage for ECC certificate
Entrust: S/MIME Certificate Issued with Incorrect Policy OID
Entrust: Delayed reporting of Jurisdiction issue in some EV TLS & Code Signing certificates
Entrust: IP Address in dNSName form
Entrust: Certificate issued with '-' in ST field
Entrust: Compromised Private Key was not Revoked in Less than 24 Hours