Google are still issuing SHA-1 Server Authentication certs ;-)

77 views
Skip to first unread message

Rob Stradling

unread,
Jan 7, 2016, 11:11:00 AM1/7/16
to Certificate Transparency Policy, certificate-transparency
e.g. https://crt.sh/?q=11871569

--
Rob Stradling
Senior Research & Development Scientist
COMODO - Creating Trust Online

Pierre Phaneuf

unread,
Jan 7, 2016, 11:24:49 AM1/7/16
to certificate-transparency, Certificate Transparency Policy
On Thu, Jan 7, 2016 at 4:10 PM, Rob Stradling <rob.st...@comodo.com> wrote:

> e.g. https://crt.sh/?q=11871569

Heh, those are the "probe" certificates that we use to measure merge
delay when monitoring logs. Their root is not trusted by any browser,
only by CT logs that we are monitoring, so it shouldn't be a big
problem, but I'm making a note of it, we should upgrade. :-)
Reply all
Reply to author
Forward
0 new messages