← Entrust cases
Bugzilla #1890898 Certificate Misissuance

Entrust: Failure to revoke OV TLS - CPS typographical (text placement) error

RESOLVED FIXED Entrust
AI Summary

Entrust identified a typographical error in their Certification Practice Statement (CPS) that affected 6,008 OV TLS certificates issued between March 22 and March 26, 2024. Initially, Entrust decided not to revoke these certificates, citing exceptional circumstances. However, after community feedback and discussions with root programs, they acknowledged the misissuance and completed the revocation of all affected certificates by June 22, 2024. The incident highlighted the need for improved incident management and communication processes within Entrust.

Model: gpt-4o-mini Generated: 2026-06-13 21:39 UTC Confidence: 0.90
Chronology
  1. Typographical error in CPS discovered.
  2. Entrust declared intent not to revoke affected certificates.
  3. All affected certificates revoked.
Participants
Bruce Morton Ngook Kong Tim Callan Ryan Dickson Amir Aamidi
External References
Similar Local Cases
#1890896 RESOLVED Certificate Misissuance Opened 2024-04-11 · Closed 2024-08-15 · 80% similar
Entrust: CPS typographical (text placement) error
#1883843 RESOLVED Certificate Misissuance Opened 2024-03-06 · Closed 2024-08-13 · 69% similar
Entrust: EV TLS Certificate cPSuri missing
#1535735 RESOLVED Certificate Misissuance Opened 2019-03-15 · Closed 2023-02-22 · 62% similar
Entrust: Issued Certificates to incorrect Organization
#1918380 RESOLVED Certificate Misissuance Opened 2024-09-12 · Closed 2024-11-06 · 58% similar
Entrust: Business Entity not permitted in CPS
#1914999 RESOLVED Certificate Misissuance Opened 2024-08-26 · Closed 2025-02-28 · 58% similar
Entrust: S/MIME OrgID Country not matching C field
#1914065 RESOLVED Certificate Misissuance Opened 2024-08-20 · Closed 2025-02-28 · 58% similar
Entrust: S/MIME certificates lacking OU verification
#1524876 RESOLVED Certificate Misissuance Opened 2019-02-03 · Closed 2023-02-22 · 58% similar
Entrust: IP in dnsName
#1889570 RESOLVED Certificate Misissuance Opened 2024-04-04 · Closed 2024-08-28 · 57% similar
NETLOCK: Policy Qualifiers other than id-qt-cps is included in TLS certificates

We use only essential cookies and local browser storage for preferences and security. See our Privacy Policy for details.

Confirm action