SwissSign: Misissuance of Intermediate Certificates because of incorrect organizationIdentifier

SwissSign AG reported a misissuance incident involving six intermediate certificates due to an incorrect organizationIdentifier. The issue was discovered during an internal review on November 9, 2018, prompting SwissSign to initiate an internal incident management process. They confirmed the misissuance, identified no affected leaf certificates, and began a root cause analysis. Follow-up measures included publishing an updated CP/CPS and implementing process improvements. The incident has been resolved, with technical safeguards now in place to prevent similar issues in the future.

1. 2018-11-09 SwissSign discovers misissuance of intermediate certificates during an internal review.
2. 2018-11-12 SwissSign publishes incident report and initiates corrective actions.
3. 2019-05-20 Technical safeguards successfully deployed to prevent future misissuances.

1. 2018-11-12 SwissSign AG — Described the misissuance incident and the timeline of actions taken.
2. 2018-11-12 Fastly representative — Requested updates on the actions described in the incident report.
3. 2019-02-22 SwissSign AG — Provided updates on process improvements and technical safeguards.
4. 2019-05-20 SwissSign AG — Reported successful deployment of technical safeguards.