5 ms·

Previous discussion: https://news.ycombinator.com/item?id=12582534 https://news.ycombinator.com/item?id=12582534 tl;dr - WoSign/StartCom are no longer trusted

• svenfaw 10y ago
  However, previously issued certs are still trusted. For instance, Firefox doesn't complain about this site's WoSign cert: https://www.checkmyping.com/ https://www.checkmyping.com/
  • tscs37 10y ago
    Existing certs are still trusted. Mozilla stated that they will not distrust certs issued with notBefore till December, so theoretically this cert is good for as long as it's still valid, only after that they need to worry.