TrustCor: Insufficient Serial Number Entropy

TrustCor Systems identified an issue with insufficient entropy in the serial number generation for certificates, which could lead to non-compliance with Baseline Requirements. Following the discovery, TrustCor suspended SSL certificate issuance and conducted a thorough investigation. They found five mis-issued certificates, all of which were promptly revoked. TrustCor has since implemented a revised compliance process to ensure adherence to serial number requirements, including monitoring and testing to prevent future misissuance.

1. 2019-02-25 TrustCor first becomes aware of the potential issue.
2. 2019-03-01 TrustCor identifies five mis-issued certificates and revokes them.
3. 2019-03-01 Certificate issuance resumed with improved entropy.