Telia: Misissued certificate - invalid dnsName

Telia Company disclosed a misissued certificate with an invalid dnsName due to a trailing space in the FQDN. The issue was reported to Telia on January 25, 2019, but the certificate was not revoked until January 31, 2019. Telia conducted an internal investigation and determined that the misissuance did not pose an urgent security concern. They have since improved their procedures to prevent similar issues, including updates to their CPS and the introduction of a 24/7 email address for urgent reports. The incident report and subsequent actions were communicated to Mozilla, and the case is now resolved.

1. 2019-01-25 Telia was informed about the misissued certificate.
2. 2019-01-31 Telia revoked the misissued certificate.
3. 2019-02-08 Telia discovered an additional invalid certificate with a similar error.

1. 2019-01-30 Titanous representative — Reported the misissued certificate with an invalid dnsName.
2. 2019-01-31 Teliasonera representative — Confirmed that an internal investigation was initiated and the certificate would be replaced.
3. 2019-02-01 Fastly representative — Requested an incident report from Telia.
4. 2019-02-15 Teliasonera representative — Reported finding an additional invalid certificate during a mass lint scan.
5. 2019-06-28 Fastly representative — Confirmed that all questions have been answered and remediation is complete.