Chinese firm revokes security certificate for Iran’s sanctioned Strait of Hormuz authority

According to Fox News, Shanghai-based tech firm TrustAsia has revoked a web security certificate issued to the Persian Gulf Straits Authority (PGSA), an entity sanctioned by the United States. The PGSA, which is linked to the IRGC, uses its online portal to vet vessels and collect tolls in the Strait of Hormuz. Alp Toker, CEO of NetBlocks, reported that the certificate was active for four days, allowing Tehran to bypass U.S. digital restrictions. The U.S. Treasury Department has previously warned that cooperating with the authority could expose entities to sanctions. Jeremy Paner, a lawyer and former official at the Office of Foreign Assets Control (OFAC), stated that providing services to sanctioned Iranian entities, even through automated processes, can serve as a basis for U.S. sanctions against non-Iranian companies. Following inquiries from Fox News, TrustAsia confirmed it had added the pgsa.ir domain to its restricted-issuance list and revoked the existing certificate. The firm stated that the initial issuance was an automated process and did not constitute a verification of the entity's legal identity or sanctions status.