← Chunghwa Telecom cases
Bugzilla #1891438
Trust Bit Disablement
Chunghwa Telecom: Postpone removal of ePKI Root CA's websites trust bit
RESOLVED
FIXED
Chunghwa Telecom
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
Chunghwa Telecom requested to postpone the removal of the trust bit for its ePKI Root CA to facilitate the transition to its new HiPKI Root CA. The request was prompted by delays in testing and budget approvals from government agencies. Mozilla considered this request and decided to postpone the trust bit removal until Firefox Release 141. The Ministry of Digital Affairs (MODA) of Taiwan supported this delay to ensure a smooth transition for government services that rely on certificates issued by the ePKI Root CA. Ultimately, the trust bit was removed in June 2025, but a new bug was opened to set a distrust-after date for certificates issued after April 15, 2025.
Chronology
- Chunghwa Telecom requests postponement of ePKI Root CA trust bit removal.
- The websites trust bit is removed in Firefox Release 141.
Thread Activity
- Cht representative — We would like to ask browsers to postpone our root certificate trust bit removal plan to a later date due to delays in function testing.
- Mozilla representative — Our current plan is to postpone processing the websites trust bit removal until Firefox Release 141.
- Mozilla representative — The websites trust bit has been removed in FF 141.
Participants
Cht representative
Mozilla representative
External References
Related Bugzilla IDs Mentioned
Similar Local Cases
IZENPE: Postpone removal of Izenpe Root CA TLS trust bit
Remove the Email (S/MIME) trust bit for ePKI Root Certification Authority
Turn off Secure Email Trust Bit for certSIGN ROOT CA cert
Turn off Secure Email Trust Bit for certSIGN ROOT CA G2 cert
Request to disable SMIME "trust bit" for GoDaddy CAs
Turn off websites and code signing trust bits for two IdenTrust root certs
Turn off Websites trust bit for OpenTrust and Certplus root certs
Chunghwa Telecom: Wrong Extended Key Usage setting by GTLSCA