Telia: Issued three precertificates with non-NIST EC curve

Telia Company discovered that it had issued three precertificates using a non-NIST EC curve, which was a violation of their policy. The issue was identified during an internal post-lint check on October 27, 2021, leading to the immediate revocation of the affected precertificates. The root cause was traced back to a misconfiguration in their CA policy, which was corrected on the same day. Telia has since implemented a pre-linting solution to prevent similar issues in the future, ensuring that any precertificate that fails lint checks will not be issued. The bug has been resolved with the implementation of these corrective measures.

1. 2021-10-27 Telia discovered the issuance of three precertificates with non-NIST EC curves and revoked them.
2. 2022-01-25 Telia implemented a pre-linting solution to prevent future occurrences of similar issues.

1. 2021-10-28 Teliasonera representative — Telia reported the issuance of three precertificates with non-NIST EC curves and described the corrective actions taken.
2. 2022-01-25 Teliasonera representative — Telia confirmed the implementation of the pre-linting solution to avoid similar issues in the future.
3. 2022-06-01 Mozilla representative — Inquiry about any additional questions or remediation items, indicating readiness to close the case.