Chunghwa Telecom reports delayed WebTrust seal registration for 2025 ePKI and HiPKI audit reports, then completes CCADB registration and closes all action items
Chunghwa Telecom opened this bug to self-report that the WebTrust for CA seal URLs for its 2025 ePKI and HiPKI audit reports were not available by the CCADB deadline. The thread says the audit period ran from 2025-06-01 to 2026-05-31, and the reporting deadline was 2026-08-31. Chunghwa Telecom said it reminded the Qualified Auditor to expedite the seal application with CPA Canada and published an explanatory letter before the deadline. It later reported that CPA Canada conducted second-round and third-round reviews, and Chunghwa Telecom updated its process to add earlier auditor engagement, weekly status meetings, formal checkpoints, escalation tracking, and stricter future contract terms. On 2026-09-25, it reported that the 2025 ePKI and HiPKI audit report seals had been successfully registered in CCADB and verification by the Root Store Operators was completed. On 2026-10-15, Chunghwa Telecom said all action items were complete and that it hoped to provide a closure report by 2026-10-22.
- Audit period for Chunghwa Telecom's WebTrust for CA seals began.
- Audit period for Chunghwa Telecom's WebTrust for CA seals ended.
- Deadline for submitting the 2025 audit reports for ePKI and HiPKI passed without the seal URLs being available.
- The audit seals for the 2025 ePKI and HiPKI annual audit report were successfully registered in CCADB and verification by the Root Store Operators was completed.
- Cht representative — Chunghwa Telecom reported the delayed receipt of WebTrust for CA seals, cited the audit deadline and policy requirement, and noted that explanatory letters were published in Bugzilla case 2067507.
- Cht representative — The reporter re-posted the link to Bugzilla case 2067507 for the explanatory letter about the delay.
- Cht representative — The auditor said CPA Canada was conducting a second-round review and that the seal timing could not yet be estimated.
- Cht representative — Chunghwa Telecom said it would revise future audit contracts to require earlier auditor engagement, earlier report delivery, earlier seal submission, and more schedule contingency.
- Cht representative — The auditor said CPA Canada was conducting a third-round review and that the seal timing could not yet be estimated.
- Cht representative — Chunghwa Telecom said the audit seals for the CHT TrustRoot CA 2025 Annual Audit Report had been registered in CCADB and that verification by the Root Store Operators was completed on 2026-09-22.
- Cht representative — Chunghwa Telecom said the 2025 audit report seals for ePKI and HiPKI had been successfully registered in CCADB and verification by the Root Store Operators was completed on 2026-09-25.
- Cht representative — Chunghwa Telecom updated the non-compliance end date to 2026-09-25, marked the explanatory-letter action item completed, and recorded several prevention items as completed or ongoing.
- Cht representative — Chunghwa Telecom said the contract now includes strict delivery timelines and penalty clauses for late submissions.
- Cht representative — Chunghwa Telecom said all action items were complete and that it hoped to provide the closure report by 2026-10-22.