← Telia Company cases
Bugzilla #1859314
Self Reported Incident
Certificate Misissuance
Telia: TLS certificates issued in violation of TLS BR v2.0.1
RESOLVED
FIXED
Telia Company
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
Telia Company reported a misissuance incident involving three TLS certificates that contained a typo in the organization name. The error was identified during a routine compliance review on October 13, 2023, and was attributed to a manual validation process that misread the verified name. The incorrect organization name 'Nordic Investement Bank' was issued instead of the correct 'Nordic Investment Bank'. Upon discovery, Telia CA promptly revoked the problematic certificates and initiated a full disclosure report. The CA has since implemented measures to improve validation processes and prevent future occurrences of similar issues.
Chronology
- Telia CA reported the misissuance of three TLS certificates.
- Telia CA revoked the problematic certificates.
- Telia CA submitted a full disclosure report regarding the incident.
- Telia CA requested the closure of the incident as all actions were completed.
Thread Activity
- Teliacompany representative — This is initial report for misissuance of three TLS certificates by Telia CA.
- Teliacompany representative — This is the full disclosure report for the incident.
- Teliacompany representative — Telia CA continues to monitor this incident, next update by Next update unless this incident is closed prior that.
- Mozilla representative — I'll close this tomorrow - Friday, 26-Jan-2024.
Participants
Teliacompany representative
Mozilla representative
External References
Similar Local Cases
Telia: Certificates Issued with lower case value in subject:countryName
Telia: S/MIME Certificate issued to expired domain
Telia: TLS OV certificate with subject countryName and localityName mismatch
Telia: Misissued certificate - wrong OrganizationName value "Hair 8 Brains"
Telia: S/MIME certificates issued in violation of S/MIME BR v1.0.1
Telia: S/MIME Misissuance incorrect AIA id-ca-caIssuer http:URI
Telia: Issued three precertificates with non-NIST EC curve
Telia: TLS incorrect AIA caIssuer URI and incorrect CDP