SwissSign: Non-BR-Compliant Certificate Issuance

RESOLVED FIXED SwissSign AG

This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update. Always refer to the official Bugzilla thread as the authoritative source. If you spot an inaccuracy, let me know via the contact form.

AI Summary

SwissSign AG disclosed a compliance failure regarding the issuance of non-Baseline Requirements (BR) compliant certificates. The CA became aware of the issues through reports in the mozilla.dev.security.policy forum and took immediate action by revoking the problematic certificates and implementing technical measures to prevent future occurrences. The CA provided a detailed remediation plan, including a timeline for addressing the identified issues. As of November 30, 2017, all relevant certificates have been revoked, and the CA has confirmed that the issues have been resolved.

Model: gpt-4o-mini Generated: 2026-06-13 17:06 UTC Revised: 2026-06-16 18:13 UTC Confidence: 0.85 27 comments

Chronology

2017-08-07 SwissSign became aware of compliance issues and initiated corrective actions.
2017-11-30 All relevant certificates were revoked.

Thread Activity

2017-08-16 Mozilla representative — Reported compliance issues found in certificates issued by SwissSign.
2017-08-17 SwissSign AG — Confirmed revocation of non-conformant certificates and implementation of technical measures.
2017-11-06 SwissSign AG — Announced release of software addressing outstanding issues.
2017-11-30 SwissSign AG — Final confirmation that all relevant certificates have been revoked.

Participants

Mozilla representative SwissSign AG Community commenter Titanous representative

External References

Original Bugzilla Case

Similar Local Cases

#1390994 RESOLVED Ca Certificate Compliance Opened 2017-08-16 · Closed 2023-02-22 · 93% similar

DocuSign/Keynectis: Non-BR-Compliant Certificate Issuance

AI Summary CA Owner

#1391056 RESOLVED Ca Certificate Compliance Self Reported Incident Opened 2017-08-16 · Closed 2023-02-22 · 92% similar

NetLock: Non-BR-Compliant Certificate Issuance

AI Summary CA Owner

#1391055 RESOLVED Ca Certificate Compliance Incident Opened 2017-08-16 · Closed 2023-02-22 · 92% similar

Microsec: Non-BR-Compliant Certificate Issuance

AI Summary CA Owner

#1390997 RESOLVED Ca Certificate Compliance Incident Revocation Issue Opened 2017-08-16 · Closed 2023-02-22 · 92% similar

GlobalSign: Non-BR-Compliant Certificate Issuance - metadata-only subject fields

AI Summary CA Owner

#1390991 RESOLVED Ca Certificate Compliance Incident Certificate Misissuance Opened 2017-08-16 · Closed 2023-02-22 · 91% similar

Disig: Non-BR-Compliant Certificate Issuance

AI Summary CA Owner

#1443731 RESOLVED Ca Certificate Compliance Certificate Misissuance Opened 2018-03-07 · Closed 2023-02-22 · 88% similar

SwissSign: Cert issued with a to long validity period

AI Summary CA Owner

#1398247 RESOLVED Ca Certificate Compliance Opened 2017-09-08 · Closed 2023-02-22 · 87% similar

DocuSign/Keynectis: Non-BR-Compliant OCSP Responders

AI Summary CA Owner

#1368171 RESOLVED Ca Certificate Compliance Incident Opened 2017-05-26 · Closed 2024-06-30 · 84% similar

Firmaprofesional: Non-audited, non-technically-constrained intermediate certificates

AI Summary CA Owner