← Chunghwa Telecom cases
Bugzilla #1904038
Self Reported Incident
Revocation Issue
Chunghwa Telecom: “Test Website - Valid" URL disclosed to CCADB is expired
RESOLVED
FIXED
Chunghwa Telecom
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
Chunghwa Telecom disclosed an incident regarding an expired certificate for the URL good.epkiov.hinet.net, which had been expired for 278 days. The issue was identified during communication with a browser contact. The CA took corrective actions, including replacing the expired certificate and implementing an automatic certificate renewal mechanism to prevent future occurrences. The incident report was deemed initially lacking in detail, prompting a restructuring of the timeline and additional action items. The CA has since completed all action items and requested closure of the incident.
Chronology
- CA received notification of expired certificate.
- CA completed certificate replacement.
- Incident closure requested after implementing corrective measures.
Thread Activity
- Cht representative — Incident report submitted detailing the expired certificate.
- Binaryparadox representative — Commented on the lack of detail in the incident report.
- Cht representative — Restructured the timeline with additional details.
- Cht representative — Reported completion of all action items and requested closure.
- Mozilla representative — Indicated intent to close the incident report.
Participants
Cht representative
Binaryparadox representative
Mozilla representative
External References
Similar Local Cases
Chunghwa Telecom: TLS Certificates Contains two LocalityName Values in SubjectDN by GTLSCA
Chunghwa Telecom: Issuance of certificate using keys previously reported as compromised
Chunghwa Telecom: Findings in 2025 WebTrust Audit - GTLSCA Audit Incident Report #4 - Missing evaluation for third parties
Chunghwa Telecom: outdated and stale policy documents disclosed to the CCADB
Chunghwa Telecom: Findings in 2025 WebTrust Audit - GTLSCA Audit Incident Report #2 - Domain validation records without the TLS BR version
Chunghwa Telecom: Delayed audit disclosure for GTLSCA
Chunghwa Telecom: Delayed disclosure to Bug 2008788 GTLSCA Audit Incident Report #2 - Domain validation records without the TLS BR version
Chunghwa Telecom: Findings in 2025 WebTrust Audit - GTLSCA Audit Incident Report #3 - Missing vulnerability scan