The bug wasn't a code defect, but a certificate signing issue, which may be masked during the certification process. More details:

http://www.tipb.com/2011/11/02/notification-error-valid-apse...