Telia: AIA CA Issuer field pointing to PEM encoded cert
Telia Company reported a compliance issue where the Authority Information Access (AIA) field in their certificates pointed to PEM encoded files instead of the required DER format. The issue was discovered on May 11, 2020, following a user notification. Telia confirmed the incident on May 12, 2020, and promptly replaced all affected CA certificate files with DER encoded versions. The CA continued issuing certificates during this period as the issue did not lead to any misissuance. Telia has since updated their CA creation instructions to prevent future occurrences and implemented monitoring solutions for AIA links to ensure compliance.
- Telia received a notification regarding the incorrect AIA field format.
- Telia confirmed the issue and began resolution efforts.
- Telia completed the AIA link scan and implemented new monitoring solutions.
- Teliasonera representative — Telia acknowledged the issue and detailed the timeline of actions taken.
- Community commenter — Concerns were raised about the adequacy of Telia's testing and monitoring processes.
- Teliasonera representative — Telia reported the completion of the AIA link monitoring solutions.