Telia: TLS OV certificate with subject countryName and localityName mismatch

Telia CA issued a certificate with a mismatch between the subject's countryName (FI) and localityName (Solna, SE). The certificate was issued to an authorized subscriber but was never put into production. Upon discovery of the mismatch through daily validation, Telia CA promptly revoked the certificate and halted further issuance until the underlying software defect was addressed. Remediation included enhancing validation checks and implementing pre-issuance linting to prevent future occurrences.

1. 2025-01-09 CSR request for certificate issuance received
2. 2025-01-10 Certificate revoked after validation detected mismatch
3. 2025-05-22 Custom linting solution deployed in production