← Taiwan-CA Inc. (TWCA) cases
Bugzilla #1884568
Delayed Revocation
TWCA: Revocation delay for EV TLS certificates with invalid subject attribute order
RESOLVED
FIXED
Taiwan-CA Inc. (TWCA)
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
TWCA reported a misissuance of 90 EV TLS certificates due to nonconforming subject attribute order. Although all affected certificates were required to be revoked within 5 days, 13 certificates were not revoked in time due to customer requests for delays, as they were used in critical applications. TWCA has since completed the revocation of all affected certificates and updated their user agreements to prohibit delayed revocations. They are also implementing measures to enhance customer awareness regarding the importance of timely certificate replacement and the risks associated with certificate pinning.
Chronology
- 13 out of 90 mis-issued EV TLS certificates were not revoked in time.
- TWCA committed to stricter policies on revocation delays.
Thread Activity
- Taiwan-CA Inc. (TWCA) — TWCA reported the misissuance of 90 EV TLS certificates.
- Taiwan-CA Inc. (TWCA) — Certificates were revoked, but 13 were delayed due to customer requests.
- Taiwan-CA Inc. (TWCA) — TWCA acknowledged past errors and committed to not delaying revocation in the future.
Participants
Taiwan-CA Inc. (TWCA)
Mozilla representative
Sectigo
External References
Related Bugzilla IDs Mentioned
Similar Local Cases
TWCA: Revocation delay for TLS certificates with non-critical basicConstraints
Digicert: Delayed Revocation for bug 1894560
NETLOCK: Policy Qualifiers other than id-qt-cps is included in TLS certificates - delayed revocation
Hongkong Post: Delayed revocation of TLS certificates with Certificate Policies extension problem
Chunghwa Telecom: Controversial Values within Extension (2.5.29.9, subjectDirectoryAttributes)
CFCA: Delayed revocation of TLS certificates(basicConstraints extension not marked as critical)
Entrust: Delayed revocation of EV TLS certificates with missing cPSuri
Telia: Delayed revocation of seven (7) certificates related to incident 1896108