IdenTrust: Root OCSP Signer certificate mis-issuance

IdenTrust Services, LLC self-disclosed a mis-issuance incident involving an OCSP signer certificate created using an incorrect Certificate Signing Request (CSR). This mis-issuance was identified while investigating unauthorized OCSP responses related to another incident. The CA reported that the mis-issuance resulted in invalid OCSP responses for the affected Root CA. A full incident report was submitted on February 18, 2026, detailing the root cause and remediation steps taken, including the implementation of hash validation checks to prevent future occurrences. The incident was resolved with the correct OCSP signer certificate generated and the necessary action items completed.

1. 2025-12-22 OCSP Certificate created
2. 2026-02-02 Non-compliance identified
3. 2026-02-05 Preliminary Incident Report disclosed
4. 2026-02-18 Full Incident Report submitted
5. 2026-03-31 Validation checks for CSR signing completed
6. 2026-04-10 Incident report closure expected

1. 2026-02-05 IdenTrust Services, LLC — Preliminary Incident Report disclosed detailing the mis-issuance.
2. 2026-02-18 IdenTrust Services, LLC — Full Incident Report submitted with detailed analysis and remediation steps.
3. 2026-03-30 IdenTrust Services, LLC — Action item for environment-specific validation checks completed.
4. 2026-04-03 CCADB representative — Final call for comments on the Incident Report before closure.