← IdenTrust Services, LLC cases
Bugzilla #1991558 Self Reported Incident

IdenTrust: TLS self audit testing below 3%

RESOLVED FIXED IdenTrust Services, LLC
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update. Always refer to the official Bugzilla thread as the authoritative source. If you spot an inaccuracy, let me know via the contact form.
AI Summary

IdenTrust reported a compliance failure where it did not meet the required 3% threshold for certificate selection in its quarterly self-assessments for Q4 2024 and Q1 2025, achieving approximately 2.99%. This issue was identified during a WebTrust audit and was disclosed in a preliminary incident report. IdenTrust has since updated its sampling script to ensure compliance and reassessed safety margins across its operations. The incident was resolved with all action items completed, including increasing the sampling threshold to 3.5%. A final closure report was requested following the completion of all remediation actions.

Model: gpt-4o-mini Generated: 2026-06-13 21:32 UTC Revised: 2026-06-16 19:28 UTC Confidence: 0.90 14 comments
Chronology
  1. IdenTrust failed to meet the 3% threshold for certificate selection in self-assessments.
  2. Non-compliance identified during WebTrust audit.
  3. Safety margin reassessment completed, confirming compliance.
Thread Activity
  1. IdenTrust Services, LLC — IdenTrust disclosed a preliminary incident report regarding the self-audit threshold failure.
  2. IdenTrust Services, LLC — IdenTrust provided a full incident report detailing the compliance failure and corrective actions.
  3. IdenTrust Services, LLC — IdenTrust requested closure of the incident report after completing all action items.
Participants
IdenTrust Services, LLC Community commenter Google representative Internet Security Research Group CCADB representative
External References
Similar Local Cases
#1991215 RESOLVED Self Reported Incident Opened 2025-09-26 · Closed 2025-11-21 · 100% similar
IdenTrust: ICA with invalid CDP
#2025596 RESOLVED Self Reported Incident Incident Opened 2026-03-23 · Closed 2026-05-18 · 100% similar
IdenTrust: Delay in updating a Bugzilla ticket Bug 2014610 - Next update
#2014609 RESOLVED Self Reported Incident Certificate Misissuance Opened 2026-02-05 · Closed 2026-04-11 · 99% similar
IdenTrust: Cross-signed root certificate mis-issuance
#2025595 RESOLVED Self Reported Incident Incident Opened 2026-03-23 · Closed 2026-05-18 · 99% similar
IdenTrust: Delay in updating a Bug 2014609 - Next update
#2025914 RESOLVED Self Reported Incident Audit Delay Opened 2026-03-24 · Closed 2026-05-18 · 99% similar
IdenTrust: Full Incident Report for bug 2014610 was not published within 14 days of discovering the issue
#2025917 RESOLVED Self Reported Incident Audit Delay Opened 2026-03-24 · Closed 2026-05-18 · 99% similar
IdenTrust: Full Incident Report for bug 2016585 was not published within 14 days of discovering the issue
#2026351 RESOLVED Self Reported Incident Certificate Misissuance Opened 2026-03-25 · Closed 2026-05-18 · 99% similar
Identrust: Root CrossSign, of dedicated Roots, missing EKU
#2014590 RESOLVED Self Reported Incident Incident Opened 2026-02-04 · Closed 2026-04-23 · 98% similar
IdenTrust: Unauthorized OCSP responses for cross-signed roots

We use only essential cookies and local browser storage for preferences and security. See our Privacy Policy for details.

Confirm action