Main section
New CA certificates for issuing email certificates
Dear SwissSign customer,
We inform you about an upcoming change to our e-mail certificates. New certificates for issuing e-mail and S/MIME certificates have been created for our Certification Authorities (CAs). These will be activated in calendar week 37 (from 9 September on) and must be used from then on.
These are two new CA certificates, which you can already download from the following links:
-
"SwissSign RSA SMIME MV ICA 2024 - 1" for issuing E-Mail ID Silver or "Mailbox Validated" certificates (MV)
-
"SwissSign RSA SMIME SV ICA 2024 - 1" for issuing E-Mail ID Gold (normal, with authentication and RSA-PSS) or "Sponsor Validated" certificates (SV)
Important: All existing CA and end user certificates remain valid. The change only affects certificates issued after 9 September.
What do you have to do as a customer?
If your system - for example your Certificate Lifecycle Management (CLM) or e-mail gateway - needs to contain the CA certificates in advance, you must import them before 9 September 2024. You can download the certificates via the links above. For more information on importing, please refer to your manufacturer's manual.
Our aim is to minimize any additional impact on our customers. However, if you use the REST RA API for the automated procurement of e-mail certificates, we ask you to take note of our next communication on this topic. You may still need to adjust individual parameters.
Why were new CA certificates issued?
The regulations governing the issuance of e-mail certificates, the "Baseline Requirements for the Issuance and Management of Publicly-Trusted S/MIME Certificates" (SMIME BR) of the CA/Browser Forum, have been updated with regard to the exact format of CA certificates. Our existing CA certificates do not comply with this new format. They must therefore be recreated and imported into your system if necessary.
We thank you for your attention and will of course be happy to answer any further questions you may have on +41 848 77 66 55 or [email protected].
Best regards
Your SwissSign Team
