Recent StartSSL/WoSign certs / root may be blacklisted by Mozilla

[pete]

Short version: If you're using a recently-issued StartSSL cert, it may (read the long version to determine if you're affected) be set as untrusted by Mozilla.

 

If StartSSL/WoSign have been up to more shady activities than already discovered, their roots may be blacklisted for a year and everyone using a WoSign/StartSSL cert will need to get one from somebody else.

 

Long version (Mozilla document): https://docs.google.com/document/d/1C6BlmbeQfn4a9zydVi2UvjBGv6szuSB4sMYUcVrR8vQ/preview

 

El Reg version: Mozilla wants woeful WoSign certs off the list ? The Register