Telia: TLS OV certificate with subject countryName and localityName mismatch

Telia CA reported an incident involving the issuance of a certificate with mismatched `subject:countryName` (FI) and `subject:localityName` (Solna, SE). The certificate was issued to an authorized subscriber but was never put into production. Upon discovering the mismatch through daily validation checks, Telia CA revoked the certificate and halted ACME OV issuance as a precaution. The root cause was identified as a software bug in the ACME validation module that failed to check the correlation between country and locality names. Remediation actions included fixing the software defect and enhancing pre-issuance linting processes. All action items have been completed, and the incident is now closed.

1. 2025-01-10 Telia CA issued a certificate with mismatched subject information.
2. 2025-01-10 Certificate was revoked after the mismatch was identified.
3. 2025-05-22 Custom linting solution deployed to prevent future mismatches.

1. 2025-01-10 Teliacompany representative — Initial incident report submitted detailing the certificate mismatch.
2. 2025-01-15 Teliacompany representative — Full incident report updated with detailed analysis and root cause.
3. 2025-05-23 Teliacompany representative — Final action item completed with deployment of the custom linting solution.
4. 2025-06-13 Teliacompany representative — Closure report submitted, confirming all action items were completed.