SwissSign: Invalid DNSName in SAN

RESOLVED FIXED SwissSign AG

This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update. Always refer to the official Bugzilla thread as the authoritative source. If you spot an inaccuracy, let me know via the contact form.

AI Summary

SwissSign AG reported an incident involving the issuance of certificates with an invalid Subject Alternative Name (SAN). The issue was identified through their internal cablint checker, which detected the problem on January 7, 2018. Following the discovery, the affected certificates were revoked by the certificate owner. SwissSign has since implemented a fix in their software to improve the validation of domain names and prevent similar issues in the future. The CA has confirmed that no further problems have been detected since the implementation of the fix.

Model: gpt-4o-mini Generated: 2026-06-13 17:42 UTC Revised: 2026-06-16 18:14 UTC Confidence: 0.90 15 comments

Chronology

2018-01-07 SwissSign identified an invalid DNSName in SAN through their cablint checker.
2018-01-07 The affected certificates were revoked by the certificate owner.
2018-01-13 SwissSign implemented a software fix to improve domain name validation.

Thread Activity

2018-01-08 Fastly representative — Requested an incident report from SwissSign regarding the invalid SAN entry.
2018-01-11 SwissSign AG — Provided details about how the issue was discovered and the actions taken.
2018-05-25 SwissSign AG — Confirmed that additional checks will be implemented to address identified weaknesses.
2019-01-14 SwissSign AG — Confirmed that the fix was implemented as planned.

Participants

Community commenter

External References

Original Bugzilla Case

Similar Local Cases

#1731586 RESOLVED Ca Certificate Compliance Self Reported Incident Certificate Misissuance Opened 2021-09-20 · Closed 2023-02-22 · 93% similar

SwissSign: Certificate with key length 16258

AI Summary CA Owner

#1613334 RESOLVED Certificate Misissuance Opened 2020-02-05 · Closed 2023-02-22 · 90% similar

SwissSign: Misissuance with mispellings in Location for a number of Certificates

AI Summary CA Owner

#1443731 RESOLVED Ca Certificate Compliance Certificate Misissuance Opened 2018-03-07 · Closed 2023-02-22 · 89% similar

SwissSign: Cert issued with a to long validity period

AI Summary CA Owner

#1636140 RESOLVED Certificate Misissuance Opened 2020-05-07 · Closed 2023-02-22 · 84% similar

SwissSign: duplicate serial number

AI Summary CA Owner

#2033000 RESOLVED Ca Certificate Compliance Incident Self Reported Incident Policy Document Issue Opened 2026-04-17 · Closed 2026-07-09 · 83% similar

SwissSign: Certificate Profile error for S/MIME MV

AI Summary CA Owner

#1506607 RESOLVED Self Reported Incident Certificate Misissuance Opened 2018-11-12 · Closed 2026-06-10 · 83% similar

SwissSign: Misissuance of Intermediate Certificates because of incorrect organizationIdentifier

AI Summary CA Owner

#1848854 RESOLVED Certificate Misissuance Self Reported Incident Opened 2023-08-15 · Closed 2024-03-27 · 83% similar

SwissSign: S/MIME LCP: CN with values other than email address

AI Summary CA Owner

#1404403 RESOLVED Ca Certificate Compliance Certificate Misissuance Opened 2017-09-29 · Closed 2023-02-22 · 82% similar

SwissSign: Two certs issued with same issuer and serial number

AI Summary CA Owner