← SwissSign AG cases
Bugzilla #1613406
Delayed Revocation
SwissSign: Delayed revocation for misspellings in Location for a number of Certificates
RESOLVED
FIXED
SwissSign AG
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
This case involves SwissSign AG's delayed revocation of certificates due to misspellings in the Location field. The CA acknowledged the misissuance and initiated revocation on December 11, 2019, but delayed the revocation of five certificates associated with critical infrastructure until January 27, 2020, citing the holiday season as a factor. SwissSign provided an incident report detailing the timeline of events and the rationale for their decisions. The bug was resolved with SwissSign committing to comply with the expected revocation timelines in the future.
Chronology
- SwissSign acknowledges misissuance and triggers revocation process.
- Revocation of certificates on critical infrastructure.
- SwissSign reports incident related to delayed revocation.
- SwissSign provides updated incident report addressing previous concerns.
Thread Activity
- Community commenter — SwissSign is to provide an incident report for its delayed revocation decisions.
- SwissSign AG — SwissSign submits initial report detailing the incident.
- SwissSign AG — SwissSign provides an updated incident report addressing the delay in revocation.
- SwissSign AG — SwissSign discusses measures to prevent future delays in certificate handling.
Participants
Community commenter
SwissSign AG
Mozilla representative
Fastly representative
External References
Related Bugzilla IDs Mentioned
Similar Local Cases
SwissSign: EV delayed revocation
SwissSign: Delayed revocation related to Bugzilla 2033000
GlobalSign: ICAs in CCADB, without EKU extension are listed in WTCA report but not in WTBR report
Camerfirma: Delayed revocations related to Invalid stateOrProvinceName field
GoDaddy: failure to revoke underscores
Let's Encrypt: Failure to revoke for Certificate Lifetime Incident
DigiCert: Failure to revoke within 7 days: OCSP EKU issue
PKIoverheid: Failure to revoke within 7 days: OCSP EKU issue