← Taiwan-CA Inc. (TWCA) cases
Bugzilla #1716670
Ca Documents
Audit Finding
TWCA: Intermediate CA Certificate Missing from Audit Reports
RESOLVED
FIXED
Taiwan-CA Inc. (TWCA)
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
The case involves Taiwan-CA Inc. (TWCA) failing to include the TWCA Global Root CA in its WebTrust audit reports, which was identified by Mozilla. TWCA acknowledged the issue and committed to remedy it in future audit reports. The CA provided updated audit reports that included the missing certificate, and Mozilla updated the CCADB record accordingly. The issue has been resolved, and TWCA has assured that such omissions will not recur in future audits.
Chronology
- Mozilla identified a missing CA certificate in TWCA's audit reports.
- TWCA submitted updated audit reports including the missing certificate.
- Mozilla updated the CCADB record for TWCA.
Thread Activity
- Mozilla representative — TWCA's audit reports do not list the TWCA Global Root CA certificate.
- Taiwan-CA Inc. (TWCA) — TWCA acknowledged the issue and began investigating.
- Taiwan-CA Inc. (TWCA) — TWCA provided updated audit reports with the missing certificate.
- Mozilla representative — Mozilla updated the CCADB record for TWCA.
Participants
Community commenter
External References
Similar Local Cases
DigiCert: Intermediate Cert(s) not disclosed in CCADB
DigiCert: Missing audits for Intermediate certificates
certSIGN: Findings in 2025 ETSI Audit - Audit Incident Report #3 – Missing certSIGN OID on Terms and Conditions
Camerfirma: audit gap
FNMT: Minor non-conformities in 2020 audit statement
TWCA: Missing or Inconsistent Disclosure of S/MIME BR Audits
GRCA: ALV failures on intermediate certificates
SwissSign: BRs require full annual audits