← Taiwan-CA Inc. (TWCA) cases
Bugzilla #1848240
Certificate Problem Report
TWCA: Undisclosed CA
RESOLVED
FIXED
Taiwan-CA Inc. (TWCA)
AI Summary
The case involves TWCA's failure to disclose a new subordinate CA certificate in the CCADB within the required timeframe as per Mozilla's Root Store Policy. The issue was identified on August 10, 2023, leading to an investigation by TWCA. They confirmed the incident and uploaded the CA certificate to CCADB on August 11, 2023. The CA certificate was subsequently revoked on August 17, 2023, due to another issue. TWCA has since revised their operational procedures to ensure compliance with disclosure requirements.
Chronology
- New CA certificate issued
- Issue identified by Mozilla
- CA certificate uploaded to CCADB
- CA certificate revoked
- Checklists for CA lifecycle operations completed
Participants
Ben Wilson
Hao-Chun Li
External References
Similar Local Cases
TWCA: TLS EV certificates with invalid subject attribute order
TWCA: TLS certificates with non-critical basicConstraints
TWCA: "unknown" OCSP response for issued certificates
TWCA: Revocation delay for EV TLS certificates with invalid subject attribute order
Google Trust Services: Revocation data publication delay for revoked unused subordinate CAs
DigiCert: Incorrect CP listed in CCADB
TWCA: CA Certificate not published in DER Encoded Format
TWCA: Revocation delay for TLS certificates with non-critical basicConstraints