← IdenTrust Services, LLC cases
Bugzilla #2065616
Ca Certificate Compliance
Incident
Self Reported Incident
Repository Issue
IdenTrust self-reported expired revoked test website certificates
ASSIGNED
IdenTrust Services, LLC
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
IdenTrust opened this case to report a self-discovered incident involving revoked TLS certificates used on test websites. The incident description says that on 2026-08-20 those revoked certificates had expired and were not renewed. IdenTrust stated that the certificates were replaced, revoked, and placed back on the test websites. The report cites TLS BRs Section 2.2 Publication of information as the relevant policy area and identifies the disclosure as self-reported. The bug remains assigned to IdenTrust with no resolution recorded in the thread.
Chronology
- Revoked TLS certificates on IdenTrust test websites expired and were not renewed.
- IdenTrust filed a preliminary incident report describing the expired test website certificates and stating they were replaced and revoked.
Thread Activity
- IdenTrust Services, LLC — IdenTrust reported that revoked TLS certificates on its test websites had expired, were not renewed, and had been replaced and revoked; it identified the disclosure as self-reported.
Participants
IdenTrust Services, LLC
External References
Similar Local Cases
IdenTrust: End Entity TLS certificate mis-issuance against CP/CPS (IdenTrust certificate policy OIDs)
IdenTrust: Unauthorized OCSP responses for cross-signed roots
IdenTrust: Failure to disclose Unconstrained intermediate Within 7 Days
IdenTrust: S/MIME certificates issued in violation of New S/MIME Baseline Requirements v1.0
IdenTrust: Root OCSP Signer certificate mis-issuance
IdenTrust: Test Certificates from cross-signed roots not disclosed in CT Logs
IdenTrust: Delay in updating a Bug 2014609 - Next update
IdenTrust: Full Incident Report for Bug 2014609 was not published within 14 days of discovering the issue