← D-TRUST cases
Bugzilla #1884714
Self Incident Disclosure
D-Trust: LDAP-URL in Subscriber Certificate Authority Information Access field
RESOLVED
FIXED
D-TRUST
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
D-Trust issued TLS certificates containing an LDAP-URL in the Subscriber Certificate Authority Information Access field after September 15, 2023. Upon discovering this issue, D-Trust adjusted its certificate profiles to exclude LDAP entries in future products and decided to revoke the affected certificates. On March 15, 2024, D-Trust revoked a total of 2,601 certificates as a precautionary measure. The root cause was identified as a misinterpretation of the Baseline Requirements regarding the inclusion of LDAP URLs, which D-Trust acknowledged as a formal violation. The CA has since committed to improving its compliance processes and tools.
Chronology
- D-Trust revoked 2,601 TLS certificates due to the inclusion of an LDAP-URL in the Subscriber Certificate Authority Information Access field.
Thread Activity
- Bdr representative — D-Trust decided to revoke the affected TLS certificates within 5 days.
- D-Trust — All affected TLS certificates were revoked.
- Bdr representative — A new incident report was opened regarding two certificates without a CT log entry.
Participants
Bdr representative
D-Trust
Binaryparadox representative
Google representative
Mozilla representative
External References
Similar Local Cases
D-Trust: Missed Revocation of TLS certificates affected by Bugzilla 1884714
D-Trust: QCStatement with http link of PKI Disclosure Statements
D-Trust: Issuance of 15 certificates with incorrect subject attribute order
D-Trust: Notice to affected Subscriber and person filing CPR not sent within 24 hours
D-TRUST: Wrong key usage (Key Agreement)
D-TRUST: Issuance of non-conformant SSL certificate
D-TRUST: Wrong key usage (Key Encipherment)
D-TRUST: Certificate with RSA key where modulus is not divisible by 8