← IdenTrust Services, LLC cases
Bugzilla #1756261
Certificate Problem Report
IdenTrust: EV TLS certificate with invalid Jurisdiction state for government entity
RESOLVED
FIXED
IdenTrust Services, LLC
AI Summary
IdenTrust identified an issue with an EV TLS certificate issued to a government entity that incorrectly included a jurisdiction state in violation of CAB Forum guidelines. The problem was discovered during an internal compliance review on February 11, 2022. The affected certificate was revoked on February 16, 2022, and the CA updated its validation procedures to prevent future occurrences. IdenTrust has confirmed that it has ceased issuing certificates with this issue and has retrained its agents on the relevant requirements.
Chronology
- Internal review identified jurisdiction state issue.
- Affected certificate revoked.
- Validation procedures updated.
- IdenTrust confirmed resolution of the issue.
Participants
roots@identrust.com
bwilson@mozilla.com
External References
Similar Local Cases
IdenTrust: TLS Certificates with outdated certificate profile
IdenTrust: Unauthorized OCSP response on a Timestamp certificate
IdenTrust: S/MIME certificates with Invalid document Identification Scheme
IdenTrust: Expired CRL served
IdenTrust: Unavailable CRL and OCSP Responders
IdenTrust: Undisclosed Unrevoked ICAs
IdenTrust: EV TLS certificate with wrong jurisdiction state for private organization
IdenTrust: Discrepancy in values of address fields within CN of SSL Certificates