Entrust: S/MIME OrgID Country not matching C field

Entrust identified a compliance issue involving three S/MIME certificates where the jurisdiction of the organization in the Organization Identifier field did not match the country field in the subject name. This discrepancy was discovered through post-issuance linting, leading to the determination that the certificates were mis-issued and required revocation. The CA took prompt action, revoking the certificates within the required 5-day timeframe. A full incident report was prepared, detailing the root cause analysis and corrective actions, including updates to the verification process and ongoing training for personnel. All action items have been completed, and Entrust has requested closure of the incident.

1. 2024-08-26 Entrust identified three mis-issued S/MIME certificates.
2. 2024-09-06 Entrust completed the revocation of the mis-issued certificates.
3. 2025-02-28 Mozilla plans to close the incident report.

1. 2024-08-26 Entrust representative — Preliminary incident report submitted detailing the mis-issuance.
2. 2024-09-06 Entrust representative — Final incident report submitted with root cause analysis and action items.
3. 2025-02-26 Mozilla representative — Confirmed plans to close the bug.