Telia: Intermediate Cert(s) Not Disclosed in CCADB

The case involves Telia Company, which had intermediate certificates not disclosed in the Common CA Database (CCADB). Kathleen Wilson from Mozilla raised the issue, citing the requirement for all certificates capable of issuing new certificates to be publicly disclosed. Telia responded by updating the CCADB to include the new Sub CA certificates and planned to revoke the undisclosed certificates. After several updates and technical challenges, Telia confirmed the revocation of the problematic certificates and their status was updated in CCADB. The case is now resolved.

1. 2018-04-05 Mozilla identified undisclosed intermediate certificates from Telia.
2. 2018-06-28 Telia confirmed the revocation of the undisclosed intermediates in CCADB.

1. 2018-04-05 Mozilla representative — Raised the issue of undisclosed intermediate certificates by Telia.
2. 2018-04-06 Teliasonera representative — Confirmed updates to CCADB to include new Sub CA certificates.
3. 2018-04-09 Fastly representative — Noted that some certificates still required further disclosure.
4. 2018-05-25 Teliasonera representative — Confirmed revocation of the undisclosed certificates.
5. 2018-06-01 Teliasonera representative — Reported technical issues with updating OCSP status data.
6. 2018-06-28 Fastly representative — Updated the state of the intermediates to 'revoked' in CCADB.