Entrust: Delayed reporting of Jurisdiction issue in some EV TLS & Code Signing certificates

Entrust reported a delayed incident regarding jurisdiction data issues in some EV TLS and Code Signing certificates. The incident was confirmed on May 16, 2024, but the report was submitted two days later, exceeding the required 72-hour timeframe. Entrust acknowledged insufficient processes and resources as contributing factors to the delay. All affected certificates were revoked within five days of confirmation, and Entrust has since identified gaps in their compliance processes and is implementing improvements. The case has been resolved with all action items completed, and Entrust has requested closure of the incident.

1. 2024-05-18 Entrust submitted a delayed incident report regarding jurisdiction data issues.
2. 2024-05-21 All affected certificates were revoked.
3. 2024-08-06 Entrust confirmed all action items were completed and requested closure of the incident.

1. 2024-05-25 Entrust representative — Entrust provided a summary of the incident and acknowledged the delay in reporting.
2. 2024-06-05 Community commenter — Concerns were raised about systemic failures in incident response practices.
3. 2024-07-31 Entrust representative — Entrust confirmed all action items had been addressed and requested closure.