issue_certificate records new certs in IssuerCertIds/OwnerCertIds, but reissue_certificate (lib.rs:400-476) only stores the certificate and emits an event — it never calls append_cert_id. Reissued certificates are therefore invisible to get_certificates_by_issuer / get_certificates_by_owner. The parent (old_id) is also left Active, so both parent and child are simultaneously valid despite "reissue/supersede" semantics. Fix: append the new id to both indexes and mark the original Revoked/Superseded (emitting a revocation event).
issue_certificaterecords new certs inIssuerCertIds/OwnerCertIds, butreissue_certificate(lib.rs:400-476) only stores the certificate and emits an event — it never callsappend_cert_id. Reissued certificates are therefore invisible toget_certificates_by_issuer/get_certificates_by_owner. The parent (old_id) is also leftActive, so both parent and child are simultaneously valid despite "reissue/supersede" semantics. Fix: append the new id to both indexes and mark the originalRevoked/Superseded(emitting a revocation event).