Telia: Misissued certificate - Invalid wildcard format
Telia Company discovered a compliance issue involving the misissuance of a certificate with an invalid wildcard format during a mass lint scan of its SSL certificates on February 8, 2019. The CA identified a total of nine invalid certificates across various error categories, including the specific wildcard format issue. Following the discovery, Telia revoked the problematic certificate within the required timeframe and implemented a fix to its server name verification code to prevent future occurrences. The fix was successfully deployed to production on February 18, 2019, and Telia has since conducted a comprehensive review of its verification processes to enhance compliance with Mozilla and CAB Forum requirements.
- Telia conducted a mass lint scan revealing nine invalid certificates.
- Telia revoked the misissued certificate.
- Telia deployed a fix to its production system to address the validation issue.
- Teliasonera representative — Telia reported the discovery of nine invalid certificates during a mass lint scan.
- Teliasonera representative — Telia confirmed the fix was updated to production as planned.
- Fastly representative — It appears that all questions have been answered and remediation is complete.