SwissSign: CP/CPS certificate profile issue

RESOLVED FIXED SwissSign AG

This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update. Always refer to the official Bugzilla thread as the authoritative source. If you spot an inaccuracy, let me know via the contact form.

AI Summary

SwissSign AG disclosed a compliance issue related to the certificate profiles in their CP/CPS documents, which resulted in the issuance of certificates with incorrect OIDs. The issue was initially identified through an external report and subsequent internal analysis revealed that several certificates were issued under incorrect OIDs between 2017 and 2018. SwissSign initiated a revocation plan for the affected certificates, which included a timeline for revocation and measures to prevent future occurrences. As of January 1, 2020, all affected certificates had been revoked or expired, and SwissSign committed to improving their processes to avoid similar issues in the future.

Model: gpt-4o-mini Generated: 2026-06-13 18:15 UTC Revised: 2026-06-16 18:15 UTC Confidence: 0.90 22 comments

Chronology

2019-06-11 SwissSign created a bug report regarding CP/CPS certificate profile issues.
2019-10-01 All certificates with incorrect OIDs were confirmed revoked or expired.

Thread Activity

2019-06-11 SwissSign AG — SwissSign reported the issue and provided details about the incorrect OIDs.
2019-07-04 SwissSign AG — SwissSign explained their rationale for a delayed revocation approach.
2019-08-05 SwissSign AG — SwissSign reported additional misissued certificates discovered during further analysis.
2019-09-02 SwissSign AG — SwissSign updated on the second revocation deadline, confirming 42,264 certificates were settled.
2020-01-29 SwissSign AG — SwissSign confirmed that all affected certificates were revoked or expired.

Participants

SwissSign AG Community commenter Fastly representative

External References

Original Bugzilla Case

Similar Local Cases

#1929189 RESOLVED Certificate Misissuance Policy Document Issue Opened 2024-11-05 · Closed 2025-07-01 · 90% similar

SwissSign: S/MIME certificates deviate from CPR

AI Summary CA Owner

#1784881 RESOLVED Policy Document Issue Self Reported Incident Opened 2022-08-15 · Closed 2023-02-22 · 86% similar

SwissSign: Missed deadline of publication of 6 CPs and 1 CP/CPS

AI Summary CA Owner

#2033000 RESOLVED Ca Certificate Compliance Incident Self Reported Incident Policy Document Issue Opened 2026-04-17 · Closed 2026-07-09 · 78% similar

SwissSign: Certificate Profile error for S/MIME MV

AI Summary CA Owner

#1509002 RESOLVED Policy Document Issue Incident Opened 2018-11-21 · Closed 2023-02-22 · 77% similar

Camerfirma: MULTICERT certificates with a validity period greater than 825 days

AI Summary CA Owner

#1596949 RESOLVED Ca Documents Policy Document Issue Self Reported Incident Opened 2019-11-15 · Closed 2023-02-22 · 75% similar

FNMT: CP/CPS lack CAA processing details

AI Summary CA Owner

#1506607 RESOLVED Self Reported Incident Certificate Misissuance Opened 2018-11-12 · Closed 2026-06-10 · 72% similar

SwissSign: Misissuance of Intermediate Certificates because of incorrect organizationIdentifier

AI Summary CA Owner

#1569651 RESOLVED Certificate Misissuance Opened 2019-07-29 · Closed 2023-02-22 · 69% similar

SwissSign: Misissuance of Leaf Certificates because of incorrect postcode

AI Summary CA Owner

#1688215 RESOLVED Ca Documents Incident Policy Document Issue Opened 2021-01-22 · Closed 2023-02-22 · 68% similar

Camerfirma: CP/CPS of Intesa Sanpaolo Sub-CA is Non-Compliant

AI Summary CA Owner