SwissSign: Misissuance of Leaf Certificates because of incorrect postcode

SwissSign AG reported a misissuance incident involving two leaf certificates that incorrectly included a full postal address instead of just the postal code. The issue was discovered during an internal review on July 25, 2019, leading to the initiation of an incident management process. The affected certificates were revoked, with the first being revoked on July 4, 2019, and the second on July 30, 2019. SwissSign has since ceased issuing certificates with this problem and has abolished the exception process that led to the error. A review confirmed no other certificates were affected, and the incident report was published on Bugzilla and the mozilla.dev.security.policy list.

1. 2019-07-25 SwissSign discovers misissuance during internal review
2. 2019-07-30 Second affected certificate revoked
3. 2019-08-26 SwissSign confirms no other certificates affected
4. 2020-01-01 All certificates with the issue revoked or expired

1. 2019-07-29 SwissSign AG — Reported misissuance of two leaf certificates due to incorrect postcode.
2. 2019-08-26 SwissSign AG — Confirmed that no other certificates are affected and requested closure of the incident.
3. 2020-01-29 SwissSign AG — All certificates with the issue have been revoked or expired.