← Chunghwa Telecom cases
Bugzilla #2007765 Root Inclusion

Add Chunghwa Telecom CHT TrustRoot CA

ASSIGNED Chunghwa Telecom
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update. Always refer to the official Bugzilla thread as the authoritative source. If you spot an inaccuracy, let me know via the contact form.
AI Summary

This case requests inclusion of a new Chunghwa Telecom TLS Root CA, “CHT TrustRoot CA - G1,” intended to progressively replace the CA’s current hierarchy using up-to-date key material. The request includes a self-signed root certificate (RSA 4096 with SHA-256) and provides a download URL for the new root certificate, along with key generation witness and PIT/POT report links. The CA also provides links to CCADB self-assessment materials and a combined CP/CPS document for assessment. After Chrome Root Program Policy Version 1.8 took effect on 2026-02-05, the CA reissued a new intermediate CA certificate chained up to the CHT TrustRoot CA on 2026-03-12 and revoked the old intermediate on the same date. The CA stated it would submit an updated CCADB self-assessment document (Version 1.8 effective 2026-02-26) and later posted the Version 1.8 self-assessment document link. The bug remains in ASSIGNED status with no resolution recorded in the thread.

Model: gpt-5.4-nano Generated: 2026-06-13 21:34 UTC Revised: 2026-06-16 18:09 UTC Confidence: 0.88 5 comments
Chronology
  1. Chunghwa Telecom submitted a request to include the new “CHT TrustRoot CA - G1” root, providing certificate and assessment materials.
  2. Chunghwa Telecom reissued a new intermediate CA certificate chained to CHT TrustRoot CA - G1 and revoked the prior intermediate certificate.
  3. Chunghwa Telecom posted the CCADB Self-Assessment document Version 1.8 link for the case.
Thread Activity
  1. Cht representative — Created the inclusion request for “CHT TrustRoot CA - G1,” providing the root certificate details, download URL, witness report links, and CCADB/CP-CPS references.
  2. Cht representative — Provided a link to the CHT Trust Root CA CCADB Self-Assessment Framework (v1.7) and the combined CP/CPS v1.05 document.
  3. Cht representative — Corrected the CCADB self-assessment and CP/CPS links for the v1.7/v1.05 materials.
  4. Cht representative — Reported reissuance of a new intermediate CA certificate chained to CHT TrustRoot CA on 2026-03-12, revocation of the old intermediate on 2026-03-12, and stated an updated CCADB self-assessment (Version 1.8) would be submitted within 2 weeks.
  5. Cht representative — Posted the CCADB Self-Assessment document Version 1.8 link and provided a CCADB access link for the related case number.
Participants
Cht representative Mozilla representative
Related Bugzilla IDs Mentioned
Similar Local Cases
#1563417 RESOLVED Root Inclusion Opened 2019-07-03 · Closed 2022-11-14 · 79% similar
Add Chunghwa Telecom's HiPKI Root CA -G1 Certificate
#1992971 ASSIGNED Root Inclusion Opened 2025-10-07 Still Open · 75% similar
Add Actalis TLS Root CAs 2025 and Actalis SMIME Root CAs 2025
#1990213 ASSIGNED Root Inclusion Self Reported Incident Opened 2025-09-23 Still Open · 71% similar
Add certSIGN Root CA G4 root certificate
#1943001 RESOLVED Root Inclusion Opened 2025-01-22 · Closed 2026-07-15 · 70% similar
Add SECOM TLS RSA Root CA 2024 and SECOM TLS ECC Root CA 2024
#1988341 ASSIGNED Root Inclusion Opened 2025-09-12 Still Open · 70% similar
Add ACCV ROOT RSA TLS 2024 and ACCV ROOT ECC TLS 2024 root certificates
#2033815 ASSIGNED Root Inclusion Opened 2026-04-21 Still Open · 70% similar
Add Disig new S/MIME & TLS Roots
#1817340 RESOLVED Root Inclusion Opened 2023-02-16 · Closed 2023-08-14 · 69% similar
Add Sectigo R46/E46 Roots
#1870013 ASSIGNED Root Inclusion Opened 2023-12-14 Still Open · 69% similar
Add Saudi National SSL root CA

We use only essential cookies and local browser storage for preferences and security. See our Privacy Policy for details.

Confirm action