SwissSign: EV JurisdictionStateOrProvinceName - one certificate not selected for revocation

SwissSign AG reported a mis-issuance of an EV certificate due to an oversight in their internal processes. One certificate was not revoked as it was in a 'domain validation pending' state, leading to its issuance with a code instead of the full jurisdiction name. The issue was identified during an internal audit, and the certificate was revoked shortly after. The root cause was linked to the new CA system's handling of certificate states, which did not account for pending requests. Corrective actions have been implemented to prevent future occurrences.

1. 2023-10-20 SwissSign employee raises a question about EV jurisdictionStateOrProvinceName field
2. 2023-11-21 Developer notices mis-issued certificate and informs Compliance team
3. 2023-11-22 Compliance confirms mis-issuance and starts revocation process