StartSSL PKI

News from StartSSL™, the SSL products of the StartCom Certification Authority. All about digital certificates and PKI.

[StartSSL PKI @startssl]

@cryptostorm_is Yes, those are meant for the public, required for correct installation depending on use case.

[StartSSL PKI @startssl]

@delphij Yes, wait for its expiration (or try with a different sub domain if that works for you).

[StartSSL PKI @startssl]

@MattWilcox @OliPicard @linode @xtilnet Also POODLE has nothing to do with the certificate hash but with SSLv3 support.

[StartSSL PKI @startssl]

@MattWilcox @OliPicard @linode @xtilnet SHA1 is NOT the default selection at StartSSL, the default is SHA2

[Kirill Ivanov @kirillIvan0ff]

@StartSSL login issues http://t.co/vSqzm2hCQu @kirillivan0ff

[StartSSL PKI @startssl]

@regex101 @richardherbert Certificates aren't valid forever, this doesn't mean you can't get new ones. Certainly nothing about "hefty price"

[StartSSL PKI @startssl]

@regex101 @richardherbert Probably you misunderstand, but there is no charge for Class 1 certificates, not after one year nor after ten.

[StartSSL PKI @startssl]

@Savagedlight Check with the CertMaster, there can be many different reasons.

[StartSSL PKI @startssl]

@nottRobin Not so ironic really, see https://t.co/QezRcYyPfe

[StartSSL PKI @startssl]

@e2b Of course, you'll find them at http://t.co/2mTRtESJ1t<LEVEL>/

[StartSSL PKI @startssl]

@jess_604 Just for the record, all public (trusted) CAs must retain all the necessary data for seven years as per Baseline Requirements.

[StartSSL PKI @startssl]

@pgbovine @nsfmc Class 2 level would be for two years.

[StartSSL PKI @startssl]

@pgbovine @nsfmc It really depends on the use case, site and other goals. Many times Class 1 (free) is perfectly fine and valid for one year

[StartSSL PKI @startssl]

@drwetter See http://t.co/XZna2V7ojS

[StartSSL PKI @startssl]

Even if it's sometimes a bit hard, it's worth the effort. Read https://t.co/qf2gsOLhDS

[StartSSL PKI @startssl]

@ercpe Probably yes, do you have an example?

[StartSSL PKI @startssl]

Create request.inf for SHA2 CSR on Windows

[NewRequest]
HashAlgorithm = SHA256
...

Issue: certreq -new request.inf request.req

[StartSSL PKI @startssl]

@sleevi_ @frgx Apparently also completely confused client certificate authentication with the server certificate. Whatever...

[StartSSL PKI @startssl]

@juergenhecht Yes, we can't disable SSLv2 just now because of IE6 WinXP.

[StartSSL PKI @startssl]

@Asmod4n For the time-being only RSA keys.