← SwissSign AG cases
Bugzilla #1443733
Ca Certificate Compliance
SwissSign: Cert issued with a to long validity period
RESOLVED
DUPLICATE
SwissSign AG
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
SwissSign notified Mozilla that it had issued an SSL certificate with a validity period that was too long. The notification was made by SwissSign’s Reinhard Dietrich, who referenced a certificate entry on crt.sh and stated that an incident report would be provided according to Mozilla’s misissuance incident report guidance. In the thread, Alex Gaynor indicated that the issue appeared to be an accidental copy of bug 1443731 and noted that this bug had been marked as a duplicate of bug 1443731. The bug’s resolution is listed as DUPLICATE, and the current status is RESOLVED. No additional remediation details beyond the intent to provide an incident report are stated in the provided comments.
Chronology
- SwissSign issued an SSL certificate with a validity period longer than allowed and disclosed the incident to Mozilla.
Thread Activity
- SwissSign AG — Reinhard Dietrich informed Mozilla that SwissSign issued an SSL certificate with a too-long validity period and said an incident report would be provided per Mozilla’s misissuance incident report guidance.
- Community commenter — Alex Gaynor said the bug looked like an accidental copy of bug 1443731 and that this bug was marked as a duplicate of bug 1443731.
Participants
SwissSign AG
Community commenter
Fastly representative
External References
Related Bugzilla IDs Mentioned
Similar Local Cases
SwissSign: Cert issued with a to long validity period
SwissSign: wrong address in EV certificate
SwissSign: Two certs issued with same issuer and serial number
SwissSign: Certificate with key length 4098 bit
SwissSign: duplicate serial number
SwissSign: S/MIME wrong key Usage
SwissSign: EV JurisdictionStateOrProvinceName - one certificate not selected for revocation
Certigna: Issuance without respecting CAA records