November 2017 CA Communication

ACTION 8: Check for issuance of certificates containing .tg domains from October 25 to November 11, 2017. We believe that the .tg Registry was compromised from October 25 to November 10, 2017, such that a perpetrator set the Name Server (NS) Records for some domains to name servers controlled by them, and then successfully obtained certificates for those domains. Please check the certificates containing .tg domains that chain up to your root certificates included in Mozilla's program to ensure that the certificate subscriber actually owns the domains included in their certificate.
ACTION 8 COMMENTS Use this space to provide further information about certificates issued for .tg domains from October 25 to November 11, 2017.

CA Owner Response Response
AC Camerfirma, S.A. There are no certificates containing .tg domains that chain up to our root certificates included in Mozilla's program.
Actalis There are no certificates containing .tg domains that chain up to our root certificates included in Mozilla's program.
Amazon Trust Services There are certificates containing .tg domains that chain up to our root certificates included in Mozilla's program, but there were no new validations on .tg domains from October 25 to November 11, 2017.
Asseco Data Systems S.A. (previously Unizeto Certum) There are no certificates containing .tg domains that chain up to our root certificates included in Mozilla's program.
Atos There are no certificates containing .tg domains that chain up to our root certificates included in Mozilla's program.
Autoridad de Certificacion Firmaprofesional There are no certificates containing .tg domains that chain up to our root certificates included in Mozilla's program.
Buypass There are no certificates containing .tg domains that chain up to our root certificates included in Mozilla's program.
Certicámara There are no certificates containing .tg domains that chain up to our root certificates included in Mozilla's program. Certicamara does not issue domain certificates.
Certinomis / Docapost There are no certificates containing .tg domains that chain up to our root certificates included in Mozilla's program.
China Financial Certification Authority (CFCA) There are no certificates containing .tg domains that chain up to our root certificates included in Mozilla's program.
Chunghwa Telecom There are no certificates containing .tg domains that chain up to our root certificates included in Mozilla's program.
ComSign There are no certificates containing .tg domains that chain up to our root certificates included in Mozilla's program.
Consorci Administració Oberta de Catalunya (Consorci AOC, CATCert) There are no certificates containing .tg domains that chain up to our root certificates included in Mozilla's program.
Cybertrust Japan / JCSI There are no certificates containing .tg domains that chain up to our root certificates included in Mozilla's program.
D-TRUST There are no certificates containing .tg domains that chain up to our root certificates included in Mozilla's program.
Deutscher Sparkassen Verlag GmbH (S-TRUST, DSV-Gruppe) There are no certificates containing .tg domains that chain up to our root certificates included in Mozilla's program.
Dhimyotis / Certigna There are no certificates containing .tg domains that chain up to our root certificates included in Mozilla's program.
DigiCert We have revoked certificates containing .tg domains that were issued between October 25 and November 11, 2017, and have sent information about these revoked certificates to Mozilla. DigiCert currently owns roots trusted by Mozilla sourced from Symantec. During the time period covered by this CA Communication, .tg certificates were issued by these roots. These certificates were revoked and disclosed to Mozilla in a separate response by Symantec prior to this communication. For reference, no .tg certificates were issued under roots held by DigiCert prior to its acquisition of Symantec's web site security business.
Disig, a.s. There are no certificates containing .tg domains that chain up to our root certificates included in Mozilla's program.
DocuSign (OpenTrust/Keynectis) There are no certificates containing .tg domains that chain up to our root certificates included in Mozilla's program.
E-Tugra There are no certificates containing .tg domains that chain up to our root certificates included in Mozilla's program.
EDICOM There are no certificates containing .tg domains that chain up to our root certificates included in Mozilla's program.
Entrust There are no certificates containing .tg domains that chain up to our root certificates included in Mozilla's program. No comments.
Global Digital Cybersecurity Authority Co., Ltd. (Formerly Guang Dong Certificate Authority (GDCA)) There are no certificates containing .tg domains that chain up to our root certificates included in Mozilla's program. We have checked and there are no certificates containing .tg domains issued by GDCA.
GlobalSign There are certificates containing .tg domains that chain up to our root certificates included in Mozilla's program, and we have re-verified the certificates that were issued for .tg domains from October 25 to November 11, 2017, and no problems were found.
GoDaddy There are certificates containing .tg domains that chain up to our root certificates included in Mozilla's program, but there were no new validations on .tg domains from October 25 to November 11, 2017.
Google Trust Services LLC (GTS) There are certificates containing .tg domains that chain up to our root certificates included in Mozilla's program, and we have re-verified the certificates that were issued for .tg domains from October 25 to November 11, 2017, and no problems were found.
Government of Hong Kong (SAR), Hongkong Post, Certizen There are no certificates containing .tg domains that chain up to our root certificates included in Mozilla's program.
Government of Spain, Autoritat de Certificació de la Comunitat Valenciana (ACCV) There are no certificates containing .tg domains that chain up to our root certificates included in Mozilla's program.
Government of Spain, Fábrica Nacional de Moneda y Timbre (FNMT) There are no certificates containing .tg domains that chain up to our root certificates included in Mozilla's program.
Government of Taiwan, Government Root Certification Authority (GRCA) There are no certificates containing .tg domains that chain up to our root certificates included in Mozilla's program.
Government of The Netherlands, PKIoverheid (Logius) There are no certificates containing .tg domains that chain up to our root certificates included in Mozilla's program.
Government of Turkey, Kamu Sertifikasyon Merkezi (Kamu SM) There are no certificates containing .tg domains that chain up to our root certificates included in Mozilla's program.
HARICA There are no certificates containing .tg domains that chain up to our root certificates included in Mozilla's program.
IdenTrust Services, LLC There are no certificates containing .tg domains that chain up to our root certificates included in Mozilla's program.
Internet Security Research Group (ISRG) We have revoked certificates containing .tg domains that were issued between October 25 and November 11, 2017, and have sent information about these revoked certificates to Mozilla. We gave information to Mozilla via direct email, bugzilla, and m.d.s.p.. We sent an email with a list of all revoked certificates to Mozilla on Friday November 24.
Izenpe S.A. There are no certificates containing .tg domains that chain up to our root certificates included in Mozilla's program.
Krajowa Izba Rozliczeniowa S.A. (KIR) There are no certificates containing .tg domains that chain up to our root certificates included in Mozilla's program.
LuxTrust There are no certificates containing .tg domains that chain up to our root certificates included in Mozilla's program.
Microsec Ltd. There are no certificates containing .tg domains that chain up to our root certificates included in Mozilla's program. Microsec has never issued SSL certificate to the .tg domain.
NetLock Ltd. There are no certificates containing .tg domains that chain up to our root certificates included in Mozilla's program.
OISTE There are no certificates containing .tg domains that chain up to our root certificates included in Mozilla's program.
QuoVadis There are no certificates containing .tg domains that chain up to our root certificates included in Mozilla's program.
SECOM Trust Systems CO., LTD. There are no certificates containing .tg domains that chain up to our root certificates included in Mozilla's program.
SK ID Solutions AS Other - explain Starting from September 1, 2017, SK ID Solutions will no longer issue new TLS Server Certificates. https://sk.ee/en/News/sk-will-cease-issuing-tls-server-certificates
SSL.com There are no certificates containing .tg domains that chain up to our root certificates included in Mozilla's program.
Sectigo Other - explain .gouv.tg domains: We have revoked all certificates that we issued between October 25 and November 11, 2017. Other .tg domains: There were no new validations, so we have not revoked any of these certificates.
SecureTrust There are no certificates containing .tg domains that chain up to our root certificates included in Mozilla's program.
SwissSign AG There are no certificates containing .tg domains that chain up to our root certificates included in Mozilla's program.
Swisscom (Switzerland) Ltd Other - explain Swisscom does not issue domain certificates.
T-Systems International GmbH (Deutsche Telekom) There are no certificates containing .tg domains that chain up to our root certificates included in Mozilla's program.
Taiwan-CA Inc. (TWCA) There are no certificates containing .tg domains that chain up to our root certificates included in Mozilla's program.
Telia Company (formerly TeliaSonera) There are no certificates containing .tg domains that chain up to our root certificates included in Mozilla's program.
TrustCor Systems There are no certificates containing .tg domains that chain up to our root certificates included in Mozilla's program.
Trustis There are no certificates containing .tg domains that chain up to our root certificates included in Mozilla's program. Not Applicable our CA is constrained to a single TLD
TurkTrust There are no certificates containing .tg domains that chain up to our root certificates included in Mozilla's program.
Visa There are no certificates containing .tg domains that chain up to our root certificates included in Mozilla's program.
Web.com There are no certificates containing .tg domains that chain up to our root certificates included in Mozilla's program. None
certSIGN There are no certificates containing .tg domains that chain up to our root certificates included in Mozilla's program.