← Chunghwa Telecom cases
Bugzilla #2008260
Self Reported Incident
Chunghwa Telecom: Delayed audit disclosure for GTLSCA
RESOLVED
FIXED
Chunghwa Telecom
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
Chunghwa Telecom reported a compliance issue regarding the delayed upload of WebTrust seal URLs for GTLSCA, which was due to an initial assessment that renewal of the seal was unnecessary. The CA owner, Ministry of Digital Affairs, planned to terminate GTLSCA's services in mid-2026, leading to a failure to apply for the necessary audit seals in time. After emergency negotiations, Chunghwa Telecom obtained the CPA CANADA seal URLs on January 30, 2026, and completed the upload to CCADB by January 31, 2026, resolving the compliance issue. The CA has since implemented process improvements to prevent future occurrences.
Chronology
- Non-compliance period began due to failure to upload WebTrust seal URLs.
- CPA CANADA seal URLs obtained.
- WebTrust seal URLs uploaded to CCADB.
Thread Activity
- Cht representative — Preliminary incident report submitted detailing the compliance issue.
- Cht representative — Full incident report provided with timeline and impact analysis.
- Cht representative — Confirmation of obtaining CPA CANADA seal URLs.
- Cht representative — Closure report submitted detailing remediation and process improvements.
Participants
Cht representative
External References
Similar Local Cases
Chunghwa Telecom: “Test Website - Valid" URL disclosed to CCADB is expired
Chunghwa Telecom: Delayed disclosure to Bug 2008788 GTLSCA Audit Incident Report #2 - Domain validation records without the TLS BR version
Chunghwa Telecom: Issuance of certificate using keys previously reported as compromised
Chunghwa Telecom: TLS Certificates Contains two LocalityName Values in SubjectDN by GTLSCA
Chunghwa Telecom: Findings in 2025 WebTrust Audit - GTLSCA Audit Incident Report #3 - Missing vulnerability scan
Chunghwa Telecom: Findings in 2025 WebTrust Audit - GTLSCA Audit Incident Report #4 - Missing evaluation for third parties
Chunghwa Telecom: outdated and stale policy documents disclosed to the CCADB
Chunghwa Telecom: Findings in 2025 WebTrust Audit - GTLSCA Audit Incident Report #2 - Domain validation records without the TLS BR version