← Entrust cases
Bugzilla #1890901
Certificate Problem Report
Entrust: Delayed incident report - CPS typographical (text placement) error
RESOLVED
FIXED
Entrust
AI Summary
Entrust reported a delayed incident regarding a typographical error in their Certificate Practice Statement (CPS) that affected 6,008 OV TLS certificates issued between March 22 and March 26, 2024. The error was self-discovered and corrected on March 26, but the incident report was published 15 days later due to concurrent incidents and resource constraints. While the compliance team managed to resolve the typographical error quickly, the drafting and publication of the incident report were delayed, which did not impact subscriber security. The case has been resolved and is now closed.
Chronology
- Typographical error in CPS discovered and corrected.
- Incident report published.
- Bug closed.
Participants
Bruce Morton
B. Wilson
A. Amidi
External References
Related Bugzilla IDs Mentioned
Similar Local Cases
Entrust: Test Website Certificates Expired
Entrust: Late Revocation for SSL Certificates issued with Un-verified IP Addresses
Entrust: TLS Certificate issued with a key that is impacted by the Close Primes vulnerability
Entrust: Failure to revoke EV TLS certificates issued before CPS update
Entrust: EV Certificate missing Issuer’s EV Policy OID
Entrust: clientAuth TLS Certificates without serverAuth EKU
Entrust: SSL Certificates issued with Un-verified IP Addresses
Entrust: EV TLS Certificate incorrect jurisdiction