← certSIGN cases
Bugzilla #1965807
Incident
certSIGN: Findings in 2025 ETSI Audit - Audit Incident Report #4 – Expired cert with bad order of attributes
RESOLVED
DUPLICATE
certSIGN
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
This case involves certSIGN's disclosure of findings from a 2025 ETSI audit, specifically regarding a test certificate issued in 2023 that did not adhere to the required order of Subject attributes. The non-compliance was identified by auditors on April 29, 2025, although the certificate had already expired in November 2023. certSIGN reported that there was no impact from this incident as the certificate was a test certificate and had no remaining valid instances. The case was ultimately resolved as a duplicate of another report (bug 1886624) that had already addressed the issue.
Chronology
- The test certificate expired.
- Non-compliance identified by auditors.
- Bug marked as a duplicate of bug 1886624.
Thread Activity
- certSIGN — Reported findings from the 2025 ETSI audit regarding an expired test certificate.
- CCADB representative — Marked this bug as a duplicate of bug 1886624.
Participants
certSIGN
CCADB representative
External References
Related Bugzilla IDs Mentioned
Similar Local Cases
certSIGN: certificates with delayed SCT signature
SwissSign: recommendation on document release dual control
certSIGN: Findings in 2025 ETSI Audit - Audit Incident Report #2 – Add test certificates in CPS
Telia: Two Intermediate CA certificates not listed in audit report
certSIGN: Findings in 2025 ETSI Audit - Audit Incident Report #1 – Improve clarity in CPS
Firmaprofesional: 2021 Audit Report Finding 1 out of 3
certSIGN: Inconsistent revocation status (CRL "revoked" vs OCSP "good") for intermediate CA "certSIGN Web CA"
certSIGN: Findings in 2025 ETSI Audit - Audit Incident Report