Untrustworthy TLS Certificate: Chunghwa Telecom's Google Chrome Issue
Chrome Browser Problem Under Control, Ministry Affirms
Google has dropped Chunghwa Telecom's Transport Layer Security (TLS) certificate from its list of default trusted certificates on Google Chrome due to continuous compliance issues. Google cited a recurring trend of compliance violations and the failure to revoke certificates being misused by malicious entities[1][3][4]. This decision comes into force for certificates issued after July 31, 2025, and will be implemented in Chrome versions 139 and above.
Reinstating the Certificate
In an effort to reinstate its certificate as trusted on Google Chrome, Chunghwa Telecom is partnering closely with Google. The company has completed all the required security updates and is aiming to have its certificate trusted again by March of the following year[2]. Moreover, Chunghwa Telecom highlights that its certificates meet the Electronic Signatures Act standards and have passed rigorous audits, ensuring no security vulnerabilities[2].
Meanwhile, the Taiwanese government has implemented a dual certificate authentication system on government websites to guarantee their safe operation across every popular browser[2]. Google's change in digital trust policy affects the newly issued TLS certificate but the certificate issued by the certification agency is valid for one year, so users can continue to enjoy robust cybersecurity protection when accessing government websites via Chrome without worrying that they will be marked as unsafe[2].
- Chunghwa Telecom, facing continuous compliance issues with its Transport Layer Security (TLS) certificate, is working diligently with Google to reinstate trust, having completed all necessary security updates for reapproval in Google Chrome, aiming for reinstatement by March of the following year.
- Despite the pending removal of their TLS certificate from Google Chrome's list of default trusted certificates due to compliance issues, Chunghwa Telecom asserts that their certificates meet the Electronic Signatures Act standards and have passed rigorous audits, affirming the maintenance of robust cybersecurity protection while accessing their websites via Chrome.
