← IdenTrust Services, LLC cases
Bugzilla #2065616
Ca Certificate Compliance
Self Reported Incident
Incident
Revocation Issue
Remediation Tracking
IdenTrust self-reported expired revoked test website certificates; remediation completed
ASSIGNED
IdenTrust Services, LLC
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
IdenTrust self-reported an incident involving its revoked TLS test website certificates. On 2026-08-20, nine Revoked test website certificates expired and were not replaced, so the test websites presented expired certificates for over 9 hours. IdenTrust said the certificates were later issued, revoked, and restored on the test websites. The report identified the incident as self-reported and cited TLS BRs Section 2.2 as the relevant policy area. IdenTrust described a failed automated renewal process and a manual-process gap as contributing factors. The latest update says the remaining action item was completed on 2026-10-02.
Chronology
- Nine revoked TLS test website certificates expired and were not replaced, leaving expired certificates on the test websites.
- IdenTrust identified the non-compliance during regular monitoring and replaced the certificates.
- IdenTrust filed the full incident report and attached the impacted certificates list.
- IdenTrust completed the last action item to fix automation for the test website certificates.
Thread Activity
- IdenTrust Services, LLC — IdenTrust filed a preliminary incident report saying revoked TLS test website certificates had expired, were not renewed, and had been replaced and revoked.
- Identtrust representative — IdenTrust filed the full incident report, stating that nine Revoked test website certificates expired, were not replaced, and were later issued, revoked, and restored on the test websites.
- Identtrust representative — IdenTrust attached the impacted certificates CSV.
- Identtrust representative — IdenTrust said it was working on an open action item and requested the Next Update field be set to 2026-09-30.
- Identtrust representative — IdenTrust said the remaining action item would be completed by 2026-10-02 and listed fixing automation for test website certificates as ongoing.
- Identtrust representative — IdenTrust said the last action item was complete and marked the automation fix complete.
Participants
Identtrust representative
External References
Similar Local Cases
IdenTrust: End Entity TLS certificate mis-issuance against CP/CPS (IdenTrust certificate policy OIDs)
IdenTrust: Test Certificates from cross-signed roots not disclosed in CT Logs
IdenTrust: Full Incident Report for Bug 2014609 was not published within 14 days of discovering the issue
IdenTrust: Unauthorized OCSP responses for cross-signed roots
IdenTrust: Root OCSP Signer certificate mis-issuance
IdenTrust: Gap between audit periods
IdenTrust: Delay in updating a Bugzilla ticket Bug 2014610 - Next update
IdenTrust: Non-BR-Compliant OCSP Responders