Google Chrome will cease trusting digital certificates from Chunghwa Telecom and Netlock starting in August 2025, coinciding with the release of Chrome 139. This decision comes after repeated compliance failures and concerning behavior patterns were observed from both certificate authorities (CAs).
The Chrome Root Store will remove these CAs after they repeatedly violated baseline requirements, including failing to revoke mis-issued certificates within required timeframes. Chrome’s security team has determined that these issues and failures to meet improvement commitments have compromised the integrity and public trust needed for internet security.
Website operators utilizing certificates from Chunghwa Telecom and Netlock must transition to alternative, publicly-trusted certificate authorities before July 31, 2025. Failure to do so will result in users encountering security warnings when accessing sites that use these certificates. Enterprises, however, will have the option to override this restriction by installing the root certificates locally.
This move follows similar actions against other certificate authorities as part of broader browser security improvements, aiming to enhance the overall security and reliability of web communications.

Collections

Google Chrome will stop trusting SSL certificates from Chunghwa Telecom and Netlock starting August 2025 due to compliance violations and failure to revoke mis-issued certificates. Website operators using these certificates must migrate to alternative trusted certificate authorities by July 31, 2025, or users will see security warnings when accessing their sites.

Google Chrome to Distrust Chunghwa Telecom and Netlock Certificates Starting August 2025