startssl's profile picture. News from StartSSL™, the SSL products of the StartCom Certification Authority. All about digital certificates and PKI.

StartSSL PKI

@startssl

News from StartSSL™, the SSL products of the StartCom Certification Authority. All about digital certificates and PKI.

@Savagedlight Check with the CertMaster, there can be many different reasons.


@pgbovine @nsfmc Class 2 level would be for two years.


@pgbovine @nsfmc It really depends on the use case, site and other goals. Many times Class 1 (free) is perfectly fine and valid for one year


Even if it's sometimes a bit hard, it's worth the effort. Read sslshopper.com/startcom-certi…


Create request.inf for SHA2 CSR on Windows [NewRequest] HashAlgorithm = SHA256 ... Issue: certreq -new request.inf request.req


Chrome will keep trusting your SHA1 hashed Class 1 cert until it expires, your next will be SHA2 hashed by the current default.


Clarification - if you have a Class 1 (free) cert hashed with SHA1, no reason to panic. Your next cert will be SHA2 hashed and not affected.


@fdevillamil @markcrooknz They do for a few years already :-)


StartSSL PKI reposted

Has anyone used this free SSL service? Seems too good to be true... startssl.com


@roryprimrose Please contact the CertMaster, thanks.


@exilsoester @cbirkenbeul Because of mixed content, not because of StartSSL. See startssl.com/?app=25#32


@ralphholz @agl__ You must be access somehow somewhere that MS cert that MAC imports incorrectly, I'd consider it a bug. Could be also mail.


@ralphholz @KevinSMcArthur Then the MS cert entered the keychain otherwise and it should be removed. It's not used for MS code signing.


@ralphholz This is a mistake at the server, remove that MS certificate from your keychain.


Loading...

Something went wrong.


Something went wrong.