IdenTrust: Delay Revocation for EV SSL Certificates

IdenTrust Services, LLC reported a delay in revoking 584 active EV TLS certificates that were issued without disclosing the vetting source. The CA identified the issue on January 26, 2022, and communicated with affected customers to replace or revoke the certificates by February 27, 2022. As of February 25, 2022, 238 certificates had been revoked, and the CA continued to work with customers to resolve the situation. By April 21, 2022, all certificates related to this incident had been revoked, and no further actions were pending.

1. 2022-01-26 IdenTrust identified 584 active EV TLS certificates requiring revocation.
2. 2022-04-21 All certificates related to the incident have been revoked.

1. 2022-02-25 IdenTrust Services, LLC — IdenTrust reported the delay in revocation and outlined the steps taken to address the issue.
2. 2022-03-02 IdenTrust Services, LLC — As of this date, 486 certificates have been revoked.
3. 2022-04-01 IdenTrust Services, LLC — All but 3 of the certificates have been revoked, with plans for the remaining to be revoked shortly.
4. 2022-04-21 IdenTrust Services, LLC — IdenTrust confirmed that all certificates related to this incident have been revoked.