IdenTrust Missing Thumbprints In Some Annual Audit Reports

We created this bug https://bugzilla.mozilla.org/show_bug.cgi?id=1588213 ___ dev-security-policy mailing list dev-security-policy@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-security-policy

IdenTrust Undisclosed Unrevoked ICA’s

We have added Bug 1598807 (https://bugzilla.mozilla.org/show_bug.cgi?id=1598807) providing a new incident report and formulating a revocation timeline. ___ dev-security-policy mailing list dev-security-policy@lists.mozilla.org https://lists.mozilla.org/

IdenTrust mis-issuance of an EV SSL Certificate

Today 4/28/2020 we issued an internal end-entity EV SSL certificate that was immediately caught and revoked prior to deployment as we noted certain details in the Subject that were not accurate. A formal incident report will follow while we investigate, document the details, and undertake correc

Re: IdenTrust mis-issuance of an EV SSL Certificate

This issue has been corrected and a temporary solution to avoid recurrence was implemented on the same day it was encountered; we are still in the process of formulating permanent corrective measures and solution to share with the community via the expected formal Incident Report. _