Chunghwa Telecom self-reported a qualified WebTrust audit finding tied to a previously disclosed incident

RESOLVED DUPLICATE Chunghwa Telecom

This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update. Always refer to the official Bugzilla thread as the authoritative source. If you spot an inaccuracy, let me know via the contact form.

AI Summary

Chunghwa Telecom opened this bug to disclose a preliminary incident report about a qualified opinion in its 2025 WebTrust for CA-BR audit for HiPKI OV TLS CA - G1. The company said the audit finding was based on an underlying incident that had already been disclosed and closed in Bug 2012274. It attached the audit report and stated that the WebTrust seal was in pre-view and would be publicly disclosed shortly. Chunghwa Telecom also asked whether it needed to duplicate the full incident and closure reports in this bug, and suggested closing the case if duplication was unnecessary. CCADB incident-reporting later marked this bug as a duplicate of Bug 2012274.

Model: gpt-5.4-mini Generated: 2026-10-20 17:32 UTC Confidence: 0.98 3 comments

Chronology

2026-09-28 Chunghwa Telecom disclosed a qualified 2025 WebTrust for CA-BR audit finding for HiPKI OV TLS CA - G1.
2026-09-29 Chunghwa Telecom attached the audit report and asked whether full incident and closure reports needed to be duplicated here.
2026-09-30 CCADB incident-reporting marked this bug as a duplicate of Bug 2012274.

Thread Activity

2026-09-28 Cht representative — Reported that the 2025 WebTrust audit resulted in a qualified opinion and identified the source as a self-reported incident.
2026-09-29 Cht representative — Attached the seal file and asked whether the incident and closure reports needed to be duplicated in this bug.
2026-09-30 CCADB representative — Marked the bug as a duplicate of Bug 2012274.

Participants

Cht representative CCADB representative

External References

Original Bugzilla Case bugzilla.mozilla.org

Related Bugzilla IDs Mentioned

#2012274

Similar Local Cases

#2067968 ASSIGNED Ca Documents Audit Document Audit Delay Audit Finding Opened 2026-09-01 Still Open · 89% similar

Chunghwa Telcom: Delay of 2025 WebTrust for CA Audit Reports seals for ePKI & HiPKI

AI Summary CA Owner

#2012274 RESOLVED Ca Certificate Compliance Incident Self Reported Incident Validation Issue Opened 2026-01-24 · Closed 2026-09-30 · 88% similar

Chunghwa Telecom: Issuance of certificate using keys previously reported as compromised

AI Summary CA Owner

#2009045 RESOLVED Self Reported Incident Audit Finding Opened 2026-01-07 · Closed 2026-02-19 · 86% similar

Chunghwa Telecom: Delayed disclosure to Bug 2008788 GTLSCA Audit Incident Report #2 - Domain validation records without the TLS BR version

AI Summary CA Owner

#2057520 RESOLVED Ca Certificate Compliance Incident Self Reported Incident Certificate Misissuance Opened 2026-07-24 · Closed 2026-09-14 · 80% similar

eMudhra emSign PKI Services: Invalid Subject Locality/State Values

AI Summary CA Owner

#2082470 ASSIGNED Ca Certificate Compliance Incident Externally Reported Incident Policy Document Issue Opened 2026-10-15 Still Open · 79% similar

D-TRUST: Reported CA key-size inconsistency in TSPS v3.1

AI Summary CA Owner

#2065061 RESOLVED Ca Certificate Compliance Incident Self Reported Incident Policy Document Issue Opened 2026-08-20 · Closed 2026-09-01 · 78% similar

SwissSign: Potential error in stateOrProvinceName

AI Summary CA Owner

#2059818 RESOLVED Ca Certificate Compliance Self Reported Incident Policy Document Issue Cp Cps Document Opened 2026-07-31 · Closed 2026-10-05 · 78% similar

Microsoft PKI Services: Third-Party Code Signing CPS missed annual update and four Issuing CAs

AI Summary CA Owner

#2056223 RESOLVED Ca Certificate Compliance Incident Self Reported Incident Certificate Misissuance Opened 2026-07-20 · Closed 2026-08-08 · 78% similar

D-Trust OCSP Responder Certificates Include CA/B Forum DV Policy OID

AI Summary CA Owner