← SwissSign AG cases
Bugzilla #1929189 Certificate Misissuance Policy Document Issue

SwissSign: S/MIME certificates deviate from CPR

RESOLVED FIXED SwissSign AG
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update. Always refer to the official Bugzilla thread as the authoritative source. If you spot an inaccuracy, let me know via the contact form.
AI Summary

SwissSign AG reported a compliance issue regarding the misissuance of 30,967 S/MIME certificates due to a deviation in their Certificate Policy Requirements (CPR). The misissuance occurred between July 24, 2023, and September 10, 2024, when the issuing CA was changed. The root cause was identified as a comment in the CPR that did not clarify the allowed key usage combinations. SwissSign revoked all affected certificates by November 9, 2024, and updated the CPR to retire the old profile by December 19, 2024. They also implemented a new automation system to ensure compliance in future certificate issuances. The case is now resolved.

Model: gpt-4o-mini Generated: 2026-06-13 20:48 UTC Revised: 2026-06-16 18:22 UTC Confidence: 0.90 11 comments
Chronology
  1. Introduction of the new S/MIME NCP extended profile and publication of version 6 of the SwissSign CPR S/MIME.
  2. Revocation of all affected certificates completed.
  3. CPR updated to mark the profile for ICA 2022-1 as retired.
  4. New CPR automation system implemented and tested.
Thread Activity
  1. SwissSign AG — Created an incident report detailing the misissuance of S/MIME certificates.
  2. SwissSign AG — Confirmed that all affected certificates were revoked on time.
  3. SwissSign AG — Requested an update on the status of the bug.
  4. SwissSign AG — Provided a closure report summarizing the incident and remediation actions.
Participants
SwissSign AG Verbuecheln representative CCADB representative
External References
Original Bugzilla Case
Similar Local Cases
#2033000 RESOLVED Ca Certificate Compliance Incident Self Reported Incident Policy Document Issue Opened 2026-04-17 · Closed 2026-07-09 · 94% similar
SwissSign: Certificate Profile error for S/MIME MV
AI Summary CA Owner
#1506607 RESOLVED Self Reported Incident Certificate Misissuance Opened 2018-11-12 · Closed 2026-06-10 · 90% similar
SwissSign: Misissuance of Intermediate Certificates because of incorrect organizationIdentifier
AI Summary CA Owner
#1558552 RESOLVED Policy Document Issue Opened 2019-06-11 · Closed 2023-02-22 · 90% similar
SwissSign: CP/CPS certificate profile issue
AI Summary CA Owner
#1636140 RESOLVED Certificate Misissuance Opened 2020-05-07 · Closed 2023-02-22 · 90% similar
SwissSign: duplicate serial number
AI Summary CA Owner
#1731586 RESOLVED Ca Certificate Compliance Self Reported Incident Certificate Misissuance Opened 2021-09-20 · Closed 2023-02-22 · 90% similar
SwissSign: Certificate with key length 16258
AI Summary CA Owner
#1848854 RESOLVED Certificate Misissuance Self Reported Incident Opened 2023-08-15 · Closed 2024-03-27 · 89% similar
SwissSign: S/MIME LCP: CN with values other than email address
AI Summary CA Owner
#1894054 RESOLVED Certificate Misissuance Revocation Issue Opened 2024-04-29 · Closed 2024-07-03 · 88% similar
SwissSign: MPKI step-up process sets wrong JoI Locality
AI Summary CA Owner
#1914020 RESOLVED Certificate Misissuance Revocation Issue Opened 2024-08-20 · Closed 2024-09-13 · 88% similar
SwissSign: S/MIME NCP non ASCII symbols in email and SAN field wrong coding
AI Summary CA Owner

We use only essential cookies and local browser storage for preferences and security. See our Privacy Policy for details.

⚠

Confirm action