← SwissSign AG cases
Bugzilla #1636140
Certificate Misissuance
SwissSign: duplicate serial number
RESOLVED
FIXED
SwissSign AG
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
SwissSign AG reported a compliance issue involving the issuance of two certificates with the same serial number by the 'SwissSign Server Silver CA 2014 - G22'. The CA became aware of the issue through a Bugzilla report and initiated an investigation. SwissSign confirmed that the certificates differed only in the Authority Information Access extension. The affected certificate was revoked on May 12, 2020, and the CA updated its work instructions to prevent similar occurrences in the future. The issue has been resolved with the implementation of new procedures.
Chronology
- SwissSign became aware of the duplicate serial number issue through a Bugzilla report.
- The affected certificate was revoked.
Thread Activity
- Mm representative — Reported the issue of duplicate serial numbers for certificates issued by SwissSign.
- SwissSign AG — Requested assignment of the bug to himself.
- SwissSign AG — Confirmed that the affected certificate has been revoked.
- SwissSign AG — Confirmed that CAA checks are performed before precert issuance.
Participants
Mm representative
SwissSign AG
Hezmatt representative
Mozilla representative
Community commenter
External References
Similar Local Cases
SwissSign: Certificate with key length 16258
SwissSign: Misissuance of Intermediate Certificates because of incorrect organizationIdentifier
SwissSign: Mis-Issuance of S/MIME certificates
SwissSign: S/MIME LCP: CN with values other than email address
SwissSign: S/MIME certificates deviate from CPR
SwissSign: Certificate Profile error for S/MIME MV
SwissSign: duplicate serial number
SwissSign: MPKI step-up process sets wrong JoI Locality