← SwissSign AG cases
Bugzilla #2057448
Ca Certificate Compliance
Incident
Certificate Misissuance
Externally Reported Incident
Opened By Ca
SwissSign preliminary incident report: invalid State field in Liechtenstein certificates
UNCONFIRMED
SwissSign AG
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
SwissSign opened this bug after a third party reported certificates issued to subscribers in Liechtenstein with an incorrect State/Province Name (ST) value. SwissSign says the ST field was expected to be empty for Liechtenstein certificates, but the affected certificates contained "Empty (No state for Liechtenstein)". The initial investigation identified 18 affected certificates, 9 of which were still valid, across 4 customers. SwissSign states that the mis-issuance process was started and that it is investigating the issue. The report cites BR 7.1.4.2.2 and CP/CPS TLS section 7.1.1.3.1 as relevant policies.
Chronology
- Third-party report identified Liechtenstein subscriber certificates with an incorrect ST value.
- SwissSign identified 18 affected certificates, with 9 still valid, and started the mis-issuance process.
Thread Activity
- SwissSign AG — SwissSign filed a preliminary incident report describing the third-party report, the affected ST value, the number of impacted certificates, and that mis-issuance handling had begun.
Participants
SwissSign AG
External References
Similar Local Cases
TunTrust: OCSP responder "Unknown" of one Pre-certificate
DigiCert: EVG CA profile compliance
DigiCert: Invalid localityName
KIR S.A.: Invalid organizationName
Consorci AOC: Non-BR-Compliant OCSP Responders
Amazon Trust Services: Failure to comply with RFC 5280
GlobalSign: CRL contains invalid signature algorithm
DigiCert: Subject Serial Numbers for Non-Commercial Entities