Comment # 3 on bug 940657 from Johannes Segitz

Somehow this grub got signed with the wrong key.

# pesign -S -i grub.efi
---------------------------------------------
certificate address is 0x7f84f40adc08
Content was not encrypted.
Content is detached; signature cannot be verified.
The signer's common name is openSUSE:Maintenance OBS Project
The signer's email address is opensuse:maintenance@build.opensuse.org
Signing time: Tue Jul 21, 2015
There were certs or crls included.
---------------------------------------------

It should have been signed with the openSUSE Secure Boot Signkey. I 
checked the build log and couldn't find anything strange. The changes
file also doesn't show anything that could explain that. I assume that
this is an OBS glitch.