TWCA: TLS EV certificates with invalid subject attribute order

RESOLVED FIXED Taiwan-CA Inc. (TWCA)

This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update. Always refer to the official Bugzilla thread as the authoritative source. If you spot an inaccuracy, let me know via the contact form.

AI Summary

Taiwan-CA Inc. (TWCA) reported a compliance issue involving 90 EV TLS certificates that were issued with an incorrect subject attribute order, violating BR Section 7.1.4.2. The issue was discovered after receiving a report on March 4, 2024. TWCA halted the issuance of EV TLS certificates and implemented a patch to their issuing system. They identified all affected certificates and revoked 77 of them within the required timeframe. The remaining 13 certificates are expected to be revoked by March 23, 2024. TWCA has also initiated corrective actions to prevent future occurrences, including the integration of additional linting tools and regular compliance reviews.

Model: gpt-4o-mini Generated: 2026-06-13 20:52 UTC Revised: 2026-06-16 18:14 UTC Confidence: 0.85 19 comments

Chronology

2024-03-04 TWCA received a report of potentially mis-issued certificates.
2024-03-05 TWCA confirmed the issue and stopped issuing EV TLS certificates.
2024-03-09 77 affected certificates were revoked or expired.
2024-03-22 All affected certificates were revoked.

Thread Activity

2024-03-05 Taiwan-CA Inc. (TWCA) — Initial report confirming the issue with EV TLS certificates.
2024-03-08 Taiwan-CA Inc. (TWCA) — Updated report detailing the number of affected certificates.
2024-03-14 Taiwan-CA Inc. (TWCA) — Final report confirming all affected certificates have been revoked.
2024-06-28 Taiwan-CA Inc. (TWCA) — Request to close the bug as all action items have been completed.

Participants

Taiwan-CA Inc. (TWCA) Mozilla representative

External References

Original Bugzilla Case

Related Bugzilla IDs Mentioned

#1884568

Similar Local Cases

#1885132 RESOLVED Self Reported Incident Opened 2024-03-13 · Closed 2024-07-12 · 93% similar

TWCA: TLS certificates with non-critical basicConstraints

AI Summary CA Owner

#1883731 RESOLVED Self Reported Incident Opened 2024-03-05 · Closed 2024-06-28 · 71% similar

Actalis: Certificates issued with invalid RDN order

AI Summary CA Owner

#1705419 RESOLVED Certificate Misissuance Self Reported Incident Opened 2021-04-15 · Closed 2023-02-22 · 66% similar

Microsoft PKI Services: Underscore in SAN

AI Summary CA Owner

#1815874 RESOLVED Self Reported Incident Opened 2023-02-09 · Closed 2023-03-20 · 66% similar

Google Trust Services: incorrect SCT in certificate

AI Summary CA Owner

#1462844 RESOLVED Self Reported Incident Revocation Issue Opened 2018-05-19 · Closed 2023-02-22 · 66% similar

GoDaddy: Improper DER results in failure to comply with RFC 5280 - Invalid characters in PrintableString

AI Summary CA Owner

#1548714 RESOLVED Self Reported Incident Opened 2019-05-02 · Closed 2023-02-22 · 65% similar

SECOM: "Default City" in Subject:localityName

AI Summary CA Owner

#2005939 RESOLVED Self Reported Incident Certificate Misissuance Opened 2025-12-14 · Closed 2026-03-13 · 65% similar

Microsec: CT Logging mistakes

AI Summary CA Owner

#1945867 RESOLVED Self Reported Incident Certificate Misissuance Opened 2025-02-04 · Closed 2025-04-18 · 65% similar

Izenpe: Incorrect Unicode characters in Subject

AI Summary CA Owner