Entrust: Delay in Updating CPS
Entrust reported a delay in updating its Certificate Policy Statement (CPS) related to the issuance of EV TLS certificates. The issue arose when the Entrust EV TLS CP OID was temporarily removed from certificates, leading to some certificates not being recognized as EV in certain browsers. The CA acknowledged that this was a compliance failure and detailed the timeline of events, including the posting of an incomplete CPS update on March 21, 2024, followed by a complete update on March 22, 2024. Entrust confirmed that the affected certificates were issued in accordance with TLS Baseline Requirements but not in line with the CPS, categorizing them as mis-issued. The CA has since submitted a separate incident report for further issues identified during this period.
- Incomplete CPS update was posted.
- Complete CPS update was posted.
- Entrust representative — Created attachment detailing the incident report.
- Entrust representative — Confirmed that the affected certificates are considered mis-issued.
- Entrust representative — All action items in this bug have been completed.