SwissSign: Misissuance of Leaf Certificates because of incorrect postcode

SwissSign AG reported a misissuance of two leaf certificates due to an incorrect postal code configuration. The issue was identified during an internal review on July 25, 2019, leading to immediate actions including revocation of the affected certificates. The misconfiguration was attributed to human error in the operator template, which concatenated postal code and location fields. SwissSign has since abolished the exception process that allowed this error and confirmed that no other certificates were affected.

1. 2019-07-25 Issue detected during internal review
2. 2019-07-29 Incident report published on Bugzilla
3. 2019-07-30 Second certificate revoked
4. 2019-08-26 Review completed, confirmed no other certificates affected
5. 2020-01-01 All problematic certificates revoked or expired