← IdenTrust Services, LLC cases
Bugzilla #2016267
Self Reported Incident
Incident
IdenTrust: Gap between audit periods
RESOLVED
FIXED
IdenTrust Services, LLC
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
IdenTrust Services, LLC reported an 81-day gap in audit coverage for the Commercial Root TLS ECC CA 2 during a TLS single-purpose root inclusion request with Chrome. The gap was identified as a compliance issue, as the root was not included in the 2023/2024 WebTrust audit report. IdenTrust has engaged their Qualified Auditor to rectify the situation by issuing an updated audit report that includes the root for the relevant period. The updated report has been completed and is now available in the Common CA Database (CCADB). All action items related to this incident have been fulfilled, and IdenTrust has requested closure of the case.
Chronology
- Non-compliance identified regarding audit coverage gap.
- Updated WebTrust audit report completed and added to CCADB.
Thread Activity
- IdenTrust Services, LLC — Incident reported regarding an 81-day gap in audit coverage.
- IdenTrust Services, LLC — Full incident report submitted detailing the audit gap.
- IdenTrust Services, LLC — Updated audit report addressing the gap was created.
- IdenTrust Services, LLC — Updated audit report was finalized and added to CCADB.
- CCADB representative — Final call for comments on the incident report before closure.
Participants
Community commenter
CCADB representative
External References
Similar Local Cases
IdenTrust: Unauthorized OCSP responses for cross-signed roots
IdenTrust: Delay in updating a Bug 2014609 - Next update
IdenTrust: Root OCSP Signer certificate mis-issuance
IdenTrust: Delay in updating a Bugzilla ticket Bug 2014610 - Next update
IdenTrust: Full Incident Report for Bug 2014609 was not published within 14 days of discovering the issue
IdenTrust: Test Certificates from cross-signed roots not disclosed in CT Logs
IdenTrust: TLS self audit testing below 3%
Identrust: Root CrossSign, of dedicated Roots, missing EKU