SwissSign: Undisclosed Intermediate Certificates

RESOLVED FIXED SwissSign AG

This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update. Always refer to the official Bugzilla thread as the authoritative source. If you spot an inaccuracy, let me know via the contact form.

AI Summary

SwissSign AG failed to disclose several intermediate CA certificates in the Common CA Database (CCADB) as required by Mozilla's root store policy. The issue was initially raised by Wayne Thayer, who requested that SwissSign disclose the certificates and provide an incident report. Following an internal review, SwissSign confirmed the certificates were disclosed on October 10, 2018, and provided an incident report detailing the circumstances of the oversight and steps taken to prevent future occurrences. The bug has since been resolved with the certificates now properly disclosed.

Model: gpt-4o-mini Generated: 2026-06-13 17:47 UTC Revised: 2026-06-16 18:14 UTC Confidence: 0.85 12 comments

Chronology

2018-04-18 Initial report of undisclosed intermediate CA certificates by Wayne Thayer.
2018-10-10 SwissSign disclosed the previously undisclosed intermediate certificates.

Thread Activity

2018-04-18 Fastly representative — SwissSign has failed to disclose several intermediate CA certificates in CCADB as required by section 5.3 of the Mozilla root store policy.
2018-04-19 SwissSign AG — Thanks for the information - I am working to analyze the issue.
2018-10-10 SwissSign AG — The undisclosed certificates have been carefully examined and disclosed.
2018-10-15 SwissSign AG — The incident report will be posted as requested.

Participants

Community commenter

External References

Original Bugzilla Case

Similar Local Cases

#1731586 RESOLVED Ca Certificate Compliance Self Reported Incident Certificate Misissuance Opened 2021-09-20 · Closed 2023-02-22 · 82% similar

SwissSign: Certificate with key length 16258

AI Summary CA Owner

#1506607 RESOLVED Self Reported Incident Certificate Misissuance Opened 2018-11-12 · Closed 2026-06-10 · 81% similar

SwissSign: Misissuance of Intermediate Certificates because of incorrect organizationIdentifier

AI Summary CA Owner

#1671113 RESOLVED Self Reported Incident Opened 2020-10-14 · Closed 2023-02-22 · 81% similar

SwissSign: Failure to provide a preliminary report within 24 hours.

AI Summary CA Owner

#1848854 RESOLVED Certificate Misissuance Self Reported Incident Opened 2023-08-15 · Closed 2024-03-27 · 81% similar

SwissSign: S/MIME LCP: CN with values other than email address

AI Summary CA Owner

#1965828 RESOLVED Self Reported Incident Security Incident Opened 2025-05-12 · Closed 2025-08-19 · 79% similar

SwissSign: OCSP outage

AI Summary CA Owner

#1766255 RESOLVED Certificate Misissuance Self Reported Incident Opened 2022-04-25 · Closed 2023-02-22 · 79% similar

SwissSign: Mis-Issuance of S/MIME certificates

AI Summary CA Owner

#1784881 RESOLVED Policy Document Issue Self Reported Incident Opened 2022-08-15 · Closed 2023-02-22 · 79% similar

SwissSign: Missed deadline of publication of 6 CPs and 1 CP/CPS

AI Summary CA Owner

#1860750 RESOLVED Ca Certificate Compliance Self Reported Incident Opened 2023-10-24 · Closed 2023-11-08 · 79% similar

SwissSign: EV code in JurisdiktionStateOrProvinceName

AI Summary CA Owner