← Entrust cases
Bugzilla #1792231
Certificate Problem Report
Entrust: TLS Certificate issued with an incorrect state or province
RESOLVED
FIXED
Entrust
AI Summary
Entrust identified an issue where a TLS certificate was issued with a state or province value not included on a pre-approved list. The problem was detected on September 15, 2022, shortly after issuance, and the certificate was reissued and subsequently revoked. Entrust has since migrated their system to prevent similar issues, with further improvements expected by December 2022. Post-issuance linting continues to be performed to catch any errors.
Chronology
- Certificate issued
- Detection by post issuance linter
- Issue confirmed by validation specialist
- Certificate reissued
- Certificate revoked
- System migration completed
- Final functionality deployed
Participants
Bruce Morton
B Wilson
External References
Similar Local Cases
Entrust: delayed revocation
Entrust: Incorrect keyUsage for ECC certificate
Entrust: IP Address in dNSName form
Entrust: Certificate issued with '-' in ST field
Entrust: Failure to revoke a certificate
Entrust: Delayed Revocation for S/MIME certificates
Entrust: S/MIME mailbox address case mismatch between subject and subjectAltName
Entrust: EV TLS Certificate incorrect jurisdiction