← Chunghwa Telecom cases
Bugzilla #1917224
Audit Delay
Self Reported Incident
Chunghwa Telecom: Delayed Annual Audit Report 2024
RESOLVED
FIXED
Chunghwa Telecom
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
Chunghwa Telecom (CHT) reported a delay in uploading its annual audit report to the Common CA Database (CCADB) beyond the required three-month timeframe following the audit period ending on August 31, 2024. The delay was attributed to an extended procurement process and lengthy administrative procedures with the qualified auditor. CHT proactively disclosed this incident and provided an explanatory letter to Mozilla and other root programs. The audit report was ultimately uploaded to CCADB on November 5, 2024, and CHT has committed to improving its processes for future audits.
Chronology
- CHT disclosed the delay in its annual audit report submission.
- CHT uploaded the audit report to CCADB.
Thread Activity
- Cht representative — CHT reported the delay in uploading the audit report to CCADB.
- Cht representative — CHT provided a closure summary detailing the incident and remediation steps.
- Mozilla representative — Mozilla confirmed the closure of the case.
Participants
Cht representative
Mozilla representative
External References
Similar Local Cases
Chunghwa Telecom: outdated and stale policy documents disclosed to the CCADB
Chunghwa Telecom: Findings in 2025 WebTrust Audit - GTLSCA Audit Incident Report #4 - Missing evaluation for third parties
Chunghwa Telecom: “Test Website - Valid" URL disclosed to CCADB is expired
Chunghwa Telecom: Findings in 2025 WebTrust Audit - GTLSCA Audit Incident Report #2 - Domain validation records without the TLS BR version
Chunghwa Telecom: TLS Certificates Contains two LocalityName Values in SubjectDN by GTLSCA
Chunghwa Telecom: Delayed disclosure to Bug 2008788 GTLSCA Audit Incident Report #2 - Domain validation records without the TLS BR version
Chunghwa Telecom: Delayed audit disclosure for GTLSCA
Chunghwa Telecom: Findings in 2025 WebTrust Audit - GTLSCA Audit Incident Report #3 - Missing vulnerability scan