News for hackers. Stuff that matters.
Re:Distrusting New WoSign and StartCom Certificates by lathiat on Wednesday October 26, 2016 @05:25AM (#12795054)
To create SHA-1 certificates for compatibility with older software. SHA-1 certificates may not be issued after December 31, 2015 and in any case browsers will not trust them. They created new certificates in 2016, with a "Start Date" in 2015 so that they satisfied this rule. This is forbidden for two reasons, first you cannot "back date" certificates and second you are no longer allowed to issue SHA-1 certificates, so they back dated to work around this.

There are no comments on this comment yet.