← SwissSign AG cases
Bugzilla #1670894
Certificate Problem Report
SwissSign: Invalid stateOrProvinceName field
RESOLVED
FIXED
SwissSign AG
AI Summary
SwissSign AG faced an issue where one certificate was issued with an invalid 'stateOrProvinceName' field value of 'CH'. This misissuance was alarming as SwissSign had previously assured that no technical constraints were needed for this field. Following the report, an internal investigation was initiated, leading to the revocation of the problematic certificate and the implementation of policies to prevent future occurrences. The root cause was identified as a flaw in their policy search system, which failed to recognize empty fields, resulting in the issuance of certificates without proper constraints.
Chronology
- Initial report of the issue by George
- Certificate revoked and policies implemented
- All identified certificates revoked
Participants
George [:fozzie]
Mike Guenther
Ryan Sleevi
Torsten Kahlstadt
Ben Wilson
External References
Similar Local Cases
SwissSign: duplicate serial number
SwissSign: Delayed revocation for mispellings in Location for a number of Certificates
SwissSign: Failure to provide a preliminary report within 24 hours.
SwissSign: CP/CPS certificate profile issue
SwissSign: Error in OrganisationIdentifier in signature/seal certificate
SwissSign: duplicate serial number
SwissSign: 'c/o' in streetAddress of EV certificate
SwissSign: Invalid CT data in issued certs (SABRE.CT misconfiguration)