Aligning with International Standards, Launching Certificate Upgrade
Taiwan Network Certification Co., Ltd. (TWCA), in order to continue aligning with international certificate standards and implementing global certificate management norms, has fully launched a website certificate specification upgrade and renewal operation. This operation aims to ensure the security and stability of website services for government agencies, financial institutions, and enterprise customers, and to assist affected customers in completing certificate updates within the established schedule, avoiding browser warnings caused by failure to update certificates in time.
Serial Number Randomness Specification, Complying with Remediation Requirements
Global digital trust and website certificate management standards continue to improve, and the international certificate standards organization CA/Browser Forum (CAB Forum) continues to strengthen its norms and review of Certificate Authorities (Certificate Authority, CA). In a recent international certificate standards review, the CAB Forum raised remediation requirements for the randomness specification of TWCA website certificate serial numbers, ensuring that certificate serial numbers contain at least 64 bits of randomness, in order to comply with international certificate management norms. This adjustment mainly involves specification compliance of the certificate serial number generation method, and was not triggered by website intrusion or leakage of certificate private keys.
Complete Update and Deployment Before November 6
To ensure that all services comply with international norms, TWCA immediately launched a certificate upgrade and reissuance plan, proactively assisting customers in completing the relevant updates. This update covers government agencies, financial institutions, general enterprise websites, and some device application certificates. TWCA completed email notification to website certificate customers on the evening of November 1, providing information required for the update and the new certificate chain, and assisting customers in completing deployment in accordance with their existing system environments. In accordance with CAB Forum requirements, the remediation update must be completed before 00:00 on November 6, 2026. Before then, existing website certificates already issued by TWCA can still be used normally, with no impact on customer services and market operations.
Cooperating with the Ministry of Digital Affairs to Assist Government Agencies with Reissuance
For government website certificate services, TWCA is actively cooperating with the operating plans of the Ministry of Digital Affairs, has proactively re-issued certificates, and sent them by email to the contacts of the original applicant agencies; government agencies do not need to submit new certificate applications. After receiving the update notice, agencies and enterprise customers only need to follow the relevant guidelines to complete updates of server certificates and necessary intermediate certificates, and conduct website connectivity testing, to complete this upgrade operation and ensure normal customer services and market operations.