Chunghwa Telecom: TLS Certificates Contains two LocalityName Values in SubjectDN by GTLSCA

Chunghwa Telecom identified an issue where 247 TLS certificates contained two LocalityName values in the SubjectDN field. This problem originated from the predecessor of GTLSCA, GCA, where the certificate issuance program incorrectly compiled locality names for small government units. The issue was discovered during a routine inspection, leading to immediate corrective actions including halting certificate issuance, reissuing corrected certificates, and revoking the affected ones. All action items related to this incident have been completed, and ongoing commitments include regular cross-check meetings to prevent future occurrences.

1. 2024-09-02 RootCA Cross-Check meeting identified the issue.
2. 2024-09-03 All affected certificates were revoked.
3. 2025-02-04 Closure summary provided and request for closure submitted.