D-Trust S/MIME pre-sign linting incident: revised public documents published; action items #1 and #4 complete
D-Trust self-reported that it had issued S/MIME certificates in violation of Section 4.3.1.2 of the S/MIME Baseline Requirements because required pre-sign linting was not implemented for specific S/MIME issuing CAs. The issue was identified internally on 2026-05-04, issuance from the affected part of the PKI was stopped the same day, and issuance was migrated to compliant infrastructure. D-Trust reported that all certificates still valid at the time were revoked by 2026-05-08 22:02 UTC. The bug then tracked follow-up action items and publication of revised public documents. In the latest update, D-Trust said the revised CP, CPS, and TSPS were published and effective on 2026-10-16, and that Action Items #1 and #4 are now complete. The ticket remains open in ASSIGNED status, but the substantive evidence delivery work described in the bug has been completed.
- Non-compliant S/MIME issuance began because required pre-sign linting was not implemented for the affected issuing CAs.
- D-Trust identified the missing pre-sign linting and stopped issuance from the affected part of its PKI.
- All remaining valid affected certificates were revoked.
- Revised public documents for the incident became effective.
- D-Trust — Posted a preliminary incident report describing the missing pre-sign linting, the stop to issuance, and the plan to revoke affected certificates.
- Bdr representative — Posted the full incident report with the non-compliance period, affected certificate count, affected issuing CAs, and completion of revocation.
- D-Trust — Reported that Action Items #1 and #4 remained ongoing while final normalization and publication work were still in progress.
- D-Trust — Said the systematic requirements review was complete, but publication of revised public documents was delayed and Action Items #1 and #4 remained ongoing for evidence delivery.
- D-Trust — Reported that the revised CP, CPS, and TSPS were now available and effective, and that Action Items #1 and #4 were complete.