3 ms·
Digicert, the CA that signs their cert, is all SHA1, so they'll probably need to change CAs at a minimum.
by gergles 12y ago
Digicert, the CA that signs their cert, is all SHA1, so they'll probably need to change CAs at a minimum.
- iancarroll 12y agoDigicert offers SHA2 certificates. It's the default option IIRC. This only applies to end entity certificates, mind you.
- gergles 12y agoIt doesn't, it applies to the entire cert chain (minus the root). DigiCert's non-EV intermediate cert (DigiCert Secure Server CA) is SHA1, so until they fix that, all DigiCert users are still going to be affected.
- iancarroll 12y agoI missed the mention about the chain, sorry. They do operate an SHA256 intermediary, "DigiCert SHA2 Secure Server CA". They also operate "DigiCert SHA2 Extended Validation Server CA". Both are documented here: https://www.digicert.com/digicert-root-certificates.htm#intermediates https://www.digicert.com/digicert-root-certificates.htm#inte...