The domain must be checked in regular intervals.
•From 15 March 2026, the maximum reusability period will be reduced to 200 days (SwissSign implementation as of 9 March 2026, 198 days)
•From 15 March 2027: 100 days
•From 15 March 2029: 10 days
For this, log in as RA operator at https://ra.swisssign.ch with the SwissID (see also the Note on RA Operators).
If the domain is new or not in the list, add it.
If the validation is pending or has expired, open the next menu via the Edit button.

If necessary, restart the check and enter the key as a TXT record in the DNS zone.
Without a successful domain check, the service URL rejects all requests with the error "bad request".
SwissSign Support can be reached at mpki@swisssign.com for further questions.