← Entrust cases
Bugzilla #1802916
Certificate Problem Report
Entrust: EV TLS Certificate incorrect jurisdiction
RESOLVED
FIXED
Entrust
AI Summary
Entrust identified an issue with EV TLS certificates that were incorrectly issued with jurisdiction information. The problem was first discovered on November 10, 2022, and further investigation revealed that 322 certificates were affected. Although Entrust did not stop issuing certificates during the investigation, they have since corrected the issues found. A new design process has been implemented to ensure accurate jurisdiction data is captured in future certificates, with updates expected to be completed by March 31, 2023.
Chronology
- VMC issued discovered
- Investigation started on impacted EV certificates
- 322 miss-issued EV certificates identified
- New jurisdiction functionality deployed
- Bug closed
Participants
Bruce Morton
Matthias
External References
Similar Local Cases
Entrust: SSL Certificates issued with Un-verified IP Addresses
Entrust: Test Website Certificates Expired
Entrust: IP Address in dNSName form
Entrust: Late Revocation for SSL Certificates issued with Un-verified IP Addresses
Entrust: S/MIME mailbox address case mismatch between subject and subjectAltName
Entrust: Incorrect keyUsage for ECC certificate
Entrust: EV Certificate missing Issuer’s EV Policy OID
Entrust: S/MIME Certificate Issued with Incorrect Policy OID