IdenTrust: test certificates inadvertently published in production environment

IdenTrust reported that test S/MIME and TLS certificates were mistakenly issued in the production environment instead of the test environment, violating CA/B Forum requirements. Although the certificates were revoked within minutes of issuance, the incident highlighted issues with QA access to production systems and insufficient training. IdenTrust has since taken steps to prevent future occurrences, including revoking QA access and retraining staff. The overall impact on trustworthiness is considered minimal due to the swift revocation.

1. 2024-01-22 IdenTrust confirmed inadvertent publication of test certificates.
2. 2024-01-26 IdenTrust disclosed the incident to CCADB.
3. 2024-02-11 IdenTrust completed analysis of the certificate database.
4. 2024-02-22 IdenTrust confirmed no further remediation actions pending.