D-Trust: Issuance of 15 certificates with incorrect subject attribute order

D-Trust issued 15 TLS certificates from the Subordinate CA 'D-TRUST CA 2-2 EV 2016' with an incorrect order of subject attributes, violating TLS Baseline Requirements. After being notified of the issue, D-Trust halted production, corrected the configuration, and revoked the affected certificates. All customers were informed and supported in replacing their certificates. The incident led to the implementation of additional internal checks and the adoption of a second linter to ensure compliance with future standards.

1. 2023-02-06 Check of existing certificate profiles against Ballot SC62
2. 2023-09-15 Entry into force of the provisions from Ballot SC62
3. 2024-04-09 Email about potential violation of the BRs
4. 2024-04-10 Start of investigation and stop of production
5. 2024-04-12 All affected certificates were revoked
6. 2024-05-10 Implementation of additional checks to cover changes of the BRs by SC62
7. 2024-07-19 PKILint installed successfully in production system
8. 2024-08-01 All measures implemented successfully