← SwissSign AG cases
Bugzilla #1731586
Ca Certificate Compliance
Self Reported Incident
Certificate Misissuance
SwissSign: Certificate with key length 16258
RESOLVED
FIXED
SwissSign AG
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
SwissSign AG identified a compliance issue during an internal certificate review, discovering a certificate issued on May 21, 2021, with a key length of 16258, which violates the Mozilla root store policy. The CA promptly initiated an investigation and reported the incident in Bugzilla. The mis-issued certificate was revoked on September 22, 2021, and SwissSign has implemented additional controls to prevent similar issues in the future, including checks for key length compliance. The case has been resolved with the necessary corrective actions taken.
Chronology
- SwissSign detects a certificate with an invalid key length during an internal review.
- The mis-issued certificate is revoked.
- SwissSign implements additional controls to ensure compliance.
Thread Activity
- SwissSign AG — SwissSign reports a certificate with an invalid key length discovered during an internal review.
- SwissSign AG — The certificate has been revoked.
- Mozilla representative — Mozilla indicates the case will be closed unless further questions arise.
Participants
SwissSign AG
Mozilla representative
Thisisntrocket representative
Community commenter
External References
Similar Local Cases
SwissSign: Misissuance of Intermediate Certificates because of incorrect organizationIdentifier
SwissSign: Mis-Issuance of S/MIME certificates
SwissSign: S/MIME LCP: CN with values other than email address
SwissSign: duplicate serial number
SwissSign: EV code in JurisdiktionStateOrProvinceName
SwissSign: Missed deadline of publication of 6 CPs and 1 CP/CPS
SwissSign: Failure to provide a preliminary report within 24 hours.
SwissSign: Missed revocation and opening Bugzilla