← SwissSign AG cases
Bugzilla #1677737
Certificate Problem Report
SwissSign: duplicate serial number
RESOLVED
FIXED
SwissSign AG
AI Summary
SwissSign AG issued two certificates with the same serial number, which is a violation of certificate issuance policies. The first certificate was confirmed, while the second was presumed to exist based on a precertificate. The issue was linked to a previous bug report, indicating a recurring problem with SwissSign's processes. The CA took steps to revoke the duplicate certificate and implement technical safeguards to prevent future occurrences. The incident was resolved after the necessary updates were deployed.
Chronology
- Issue reported by Andrew Ayer regarding duplicate serial number.
- Certificate revocation completed.
- System updates deployed to prevent future issues.
Participants
Andrew Ayer
Mike Guenther
Ryan Sleevi
Torsten Kahlstadt
Ben Wilson
External References
Similar Local Cases
SwissSign: Invalid stateOrProvinceName field
SwissSign: duplicate serial number
SwissSign: Failure to provide a preliminary report within 24 hours.
SwissSign: Delayed revocation for mispellings in Location for a number of Certificates
SwissSign: CP/CPS certificate profile issue
SwissSign: failure to provide a preliminary report within 24 hours
SwissSign: Error in OrganisationIdentifier in signature/seal certificate
e-commerce monitoring GmbH: CN domain not in SAN