IdenTrust: Delayed disclosure of Timestamping Intermediate CA in CCADB
IdenTrust self-reported a CCADB compliance incident involving a Timestamping Intermediate CA that was issued on 2026-06-11 but not disclosed in CCADB within the required timeframe. The full incident report says the intermediate was disclosed on 2026-07-07 after an internal review found it missing, and one Timestamp Authority certificate had already been issued from it on 2026-06-12. IdenTrust stated that issuance was not stopped because the problem was a CCADB disclosure delay rather than a certificate issuance issue. The report identified the root cause as a manual workflow that lacked a verification step and automatic deadline alerts. IdenTrust completed the preventive action to implement improved new ICA workflow with automatic notifications on 2026-09-16. On 2026-09-23, IdenTrust requested closure, and on 2026-09-24 CCADB posted a final call for comments saying the report would be closed around 2026-10-01.
- A Timestamping Intermediate CA certificate was issued.
- A Timestamp Authority certificate was issued from the intermediate CA.
- The undisclosed intermediate CA was found during internal review and disclosed in CCADB.
- The preventive action to implement improved new ICA workflow with automatic notifications was completed.
- IdenTrust requested closure of the incident report.
- IdenTrust Services, LLC — IdenTrust opened a preliminary incident report saying a Timestamping Intermediate CA was generated on 2026-06-11 but not disclosed in CCADB until 2026-07-07, and identified CCADB Policy Section 3.2 as relevant.
- IdenTrust Services, LLC — IdenTrust said it was actively working on the full incident report and would post it no later than 2026-07-21.
- IdenTrust Services, LLC — IdenTrust posted the full incident report, explaining the disclosure deadline, the internal review that found the missing entry, and the ongoing workflow-improvement action item.
- IdenTrust Services, LLC — IdenTrust said it was working on the open action item and requested the Next Update field be set to 2026-09-18.
- IdenTrust Services, LLC — IdenTrust said the action item to implement improved new ICA workflow with automatic notifications was complete.
- IdenTrust Services, LLC — IdenTrust submitted a closure summary stating that all action items were complete and requested closure.
- CCADB representative — CCADB posted a final call for comments or questions and said the report would be closed around 2026-10-01.