IdenTrust: S/MIME Certificates issued without CAB Forum OID

IdenTrust identified that 1135 S/MIME certificates issued to four Enterprise customers were missing the expected CA/B Forum OID after the deadline of August 31, 2023. This issue arose because the API access to the publicly trusted Intermediate Certificate Authority (ICA) was not disabled for these customers, leading to the issuance of non-compliant certificates. The affected certificates were revoked within five days of discovery, although the timeline for revocation caused dissatisfaction among some customers. No further actions are required to resolve this issue.

1. 2023-10-23 Internal review found 1135 certificates missing OID
2. 2023-10-23 Disabled API access for affected customers
3. 2023-10-24 Notified customers of revocation requirement
4. 2023-10-27 Confirmed all affected certificates have been revoked