IdenTrust: Delayed disclosure of Timestamping Intermediate CA in CCADB
IdenTrust self-reported a CCADB compliance incident involving a Timestamping Intermediate CA that was issued on 2026-06-11 but not disclosed in CCADB within the required timeframe. The full incident report says the disclosure deadline under CCADB Policy Section 3.2 was missed, and the intermediate was only entered in CCADB on 2026-07-07 after an internal review found it missing. One Timestamp Authority certificate had already been issued from the intermediate on 2026-06-12. IdenTrust said issuance was not stopped because the issue was a CCADB disclosure delay, not a certificate issuance problem. The report identifies one completed mitigation action to update the undisclosed ICA in CCADB and one ongoing preventive action to improve the new-ICA workflow with automatic notifications. The bug remains open and assigned to IdenTrust.
- A Timestamping Intermediate CA certificate was issued.
- A Timestamp Authority certificate was issued from the intermediate CA.
- The undisclosed intermediate CA was found during internal review and disclosed in CCADB.
- IdenTrust requested the Next Update field be set to 2026-09-18.
- IdenTrust Services, LLC — IdenTrust opened a preliminary incident report saying a Timestamping Intermediate CA was generated on 2026-06-11 but not disclosed in CCADB until 2026-07-07, and identified CCADB Policy Section 3.2 as relevant.
- IdenTrust Services, LLC — IdenTrust said it was actively working on the full incident report and would post it no later than 2026-07-21.
- IdenTrust Services, LLC — IdenTrust posted the full incident report, explaining the disclosure deadline, the internal review that found the missing entry, and the ongoing workflow-improvement action item.
- IdenTrust Services, LLC — IdenTrust said it was working on the open action item and requested the Next Update field be set to 2026-09-18.