← IdenTrust Services, LLC cases
Bugzilla #1991558
Certificate Problem Report
IdenTrust: TLS self audit testing below 3%
CLOSED
FIXED
IdenTrust Services, LLC
AI Summary
IdenTrust failed to meet the required 3% threshold for certificate selection in its quarterly self-assessments for Q4 2024 and Q1 2025, achieving only 2.99%. This non-compliance was identified during a WebTrust audit, leading to a review of their sampling processes. The root cause was a formula error in their sampling script, which has since been updated to ensure compliance. IdenTrust has committed to reassessing safety margins across all requirements and has completed all action items related to this incident.
Chronology
- Non-compliance identified during audit
- Updated sampling script to ensure compliance
- Completed safety margin reassessment
- Closure report filed
Participants
IdenTrust
Mozilla
Google
External References
Similar Local Cases
IdenTrust: TLS ICA with User Notice in Policy Qualifier
IdenTrust: Failure to Revoke Subscriber Certificates Within 5 days
IdenTrust: Pre-certificates without a final certificate showing OCSP error
IdenTrust: Failure to provide OCSP responses for valid ICA certificates
IdenTrust: Expired CRLs
IdenTrust: Expired CRLs
IdenTrust: CRL Potential Publication Delay due to Cache
IdenTrust: Missing Revocation Reasons in CRL