Chunghwa Telecom: Test certificate with unregistered domain name

Chunghwa Telecom reported a mis-issued certificate with an unregistered domain name discovered during an internal audit. The incident occurred on February 15, 2019, leading to immediate revocation of the affected certificates. The CA implemented an automatic FQDN-checking function to prevent future occurrences and has since enhanced its validation processes. The CA has communicated with its auditor regarding the incident and has taken steps to ensure compliance with industry standards.

1. 2019-02-15 Mis-issued certificate discovered and revoked.
2. 2019-03-30 Automatic FQDN-checking function implemented.
3. 2020-02-18 New validation methods went live.