← SwissSign AG cases
Bugzilla #1914023 Self Incident Disclosure

SwissSign: S/MIME LCP not-permitted key usage

RESOLVED FIXED SwissSign AG
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update. Always refer to the official Bugzilla thread as the authoritative source. If you spot an inaccuracy, let me know via the contact form.
AI Summary

SwissSign AG disclosed a compliance failure involving the issuance of two S/MIME LCP certificates with a non-permitted legacy key usage. This issue was identified during an annual audit, prompting the CA to halt the renewal process that allowed the mis-issuance. The affected certificates were revoked before the specified deadline, and the CA has implemented measures to prevent future occurrences, including the removal of the auto-renewal feature and enhancements to their testing procedures. All remediation actions have been completed, and the CA has requested closure of this Bugzilla case.

Model: gpt-4o-mini Generated: 2026-06-13 20:49 UTC Revised: 2026-06-16 18:21 UTC Confidence: 0.90 12 comments
Chronology
  1. First mis-issuance of affected S/MIME certificate.
  2. Last mis-issuance of affected S/MIME certificate.
  3. Revocation of both affected certificates completed.
  4. Test coverage for certificate profile changes implemented.
Thread Activity
  1. SwissSign AG — Posted preliminary incident report detailing the mis-issuance.
  2. SwissSign AG — Updated that both affected certificates were revoked.
  3. SwissSign AG — Confirmed implementation of test coverage for profile changes.
  4. Mozilla representative — Indicated intent to close the case unless further issues arise.
Participants
SwissSign AG Mozilla representative
External References
Original Bugzilla Case
Similar Local Cases
#1894054 RESOLVED Certificate Misissuance Revocation Issue Opened 2024-04-29 · Closed 2024-07-03 · 67% similar
SwissSign: MPKI step-up process sets wrong JoI Locality
AI Summary CA Owner
#1914020 RESOLVED Certificate Misissuance Revocation Issue Opened 2024-08-20 · Closed 2024-09-13 · 66% similar
SwissSign: S/MIME NCP non ASCII symbols in email and SAN field wrong coding
AI Summary CA Owner
#1916489 RESOLVED Self Incident Disclosure Opened 2024-09-03 · Closed 2025-03-18 · 64% similar
SwissSign: LDAP URL still in CRL distribution point (CDP)
AI Summary CA Owner
#2033000 RESOLVED Ca Certificate Compliance Incident Self Reported Incident Policy Document Issue Opened 2026-04-17 · Closed 2026-07-09 · 56% similar
SwissSign: Certificate Profile error for S/MIME MV
AI Summary CA Owner
#1636140 RESOLVED Certificate Misissuance Opened 2020-05-07 · Closed 2023-02-22 · 56% similar
SwissSign: duplicate serial number
AI Summary CA Owner
#1848854 RESOLVED Certificate Misissuance Self Reported Incident Opened 2023-08-15 · Closed 2024-03-27 · 56% similar
SwissSign: S/MIME LCP: CN with values other than email address
AI Summary CA Owner
#1731586 RESOLVED Ca Certificate Compliance Self Reported Incident Certificate Misissuance Opened 2021-09-20 · Closed 2023-02-22 · 55% similar
SwissSign: Certificate with key length 16258
AI Summary CA Owner
#1766255 RESOLVED Certificate Misissuance Self Reported Incident Opened 2022-04-25 · Closed 2023-02-22 · 53% similar
SwissSign: Mis-Issuance of S/MIME certificates
AI Summary CA Owner

We use only essential cookies and local browser storage for preferences and security. See our Privacy Policy for details.

⚠

Confirm action