← Telia Company cases
Bugzilla #1920659
Certificate Misissuance
Self Reported Incident
Telia: S/MIME Certificate issued to expired domain
RESOLVED
FIXED
Telia Company
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
Telia Certificate Authority (Telia CA) issued a Legacy OV S/MIME certificate for a domain that had expired validation. Upon discovering the issue during a routine log review, Telia CA promptly revoked the affected certificate and disabled the subscriber's API to prevent further misissuance. A preliminary incident report was submitted, followed by a full report detailing the root cause, which was attributed to a manual configuration error that overlooked the domain validation reuse threshold. Telia CA has committed to improving its configuration management processes to prevent similar incidents in the future. The case has been resolved with all action items completed.
Chronology
- Telia CA issued a Legacy OV S/MIME certificate for a domain with expired validation.
- The case was resolved and all action items were completed.
Thread Activity
- Teliacompany representative — Preliminary incident report submitted regarding the issuance of a certificate for an expired domain.
- Teliacompany representative — Full incident report submitted detailing the misissuance and its impact.
- Teliacompany representative — Provided incident report closure summary as requested.
- Mozilla representative — Confirmed closure of the case on December 6, 2024.
Participants
Teliacompany representative
Mozilla representative
External References
Similar Local Cases
Telia: TLS certificates issued in violation of TLS BR v2.0.1
Telia: Certificates Issued with lower case value in subject:countryName
Telia: TLS OV certificate with subject countryName and localityName mismatch
Telia: Misissued certificate - wrong OrganizationName value "Hair 8 Brains"
Telia: S/MIME certificates issued in violation of S/MIME BR v1.0.1
Telia: S/MIME Misissuance incorrect AIA id-ca-caIssuer http:URI
Telia: TLS incorrect AIA caIssuer URI and incorrect CDP
Telia: Issued three precertificates with non-NIST EC curve