3 ms·

e-Guven as well https://blog.mozilla.org/security/2015/04/27/removing-e-guven-ca-certificate/ https://blog.mozilla.org/security/2015/04/27/removing-e-guve...

e-Guven as well https://blog.mozilla.org/security/2015/04/27/removing-e-guven-ca-certificate/ https://blog.mozilla.org/security/2015/04/27/removing-e-guve... edit: e-Guven is being removed "due to insufficient and outdated audits" and not a compromise (Couldn't reply below).

yuhong 11y ago
e-Guven was never compromised, it just still uses outdated practices like issuing directly from the root and expires in 2017 anyway. I once even caught an 1024-bit DSA cert being issued from this root by mistake.