← Chunghwa Telecom cases
Bugzilla #1959278
Delayed Revocation
Chunghwa Telecom: Delayed revocation for bug 1951415
RESOLVED
FIXED
Chunghwa Telecom
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
Chunghwa Telecom (CHT) reported a delayed revocation incident involving four TLS certificates that were not revoked within the required 24-hour period as specified in TLS BR 4.9.1.1 Item 5. The issue arose from a misunderstanding of the relevant policies during a large-scale migration, where CAA checks were inadequately performed. Although the majority of the affected certificates were revoked on time, the delay in revocation of these four certificates constituted a compliance violation. CHT has since completed the revocation and implemented measures to improve their compliance processes, including retraining staff and enhancing communication with subscribers. The case has been resolved and is now closed.
Chronology
- Non-compliance start date identified
- Non-compliance identified date confirmed
- Delayed revocation of certificates completed
- Closure report submitted and case resolved
Thread Activity
- Cht representative — Preliminary incident report submitted, acknowledging delayed revocation.
- Cht representative — Full incident report provided detailing the causes and timeline of the incident.
- Google representative — Request for CHT to submit a closure report.
- Cht representative — Closure report submitted, detailing remediation actions taken.
Participants
Cht representative
Google representative
External References
Related Bugzilla IDs Mentioned
Similar Local Cases
Chunghwa Telecom: Controversial Values within Extension (2.5.29.9, subjectDirectoryAttributes)
Chunghwa Telecom: Delayed Revocation Due to GTLSCA EKU Misissuance
Chunghwa Telecom: Delayed Revocation with Controversial Extension (2.5.29.9, SubjectDirectoryAttributes)
Chunghwa Telecom: Delayed disclosure to Bug 2008782 GTLSCA Audit Incident Report #1 - mass certificate revocation plan
Chunghwa Telecom: Test Website certificate not revoked
Chunghwa Telecom: Failure to check restrictive CAA record during Migration
KIR: Intermediate CA - SZAFIR Trusted CA3 - revocation status not changed in CCADB
DigiCert: Delayed revocation of 1910322