Google Chrome Distrusting WoSign and StartCom Certificates

By just Another Techy / On / In Homelab

wosign

In case you missed it, when Google releases Chrome 56, which is currently expected to be available in January 2017, the browser will not trust certificates from WoSign and StartCom issued after midnight, October 21, 2016

I’ve been using the free certs from StartCom (over Let’s Encrypt) in my homelab for UCM, Expressway, CMS, etc.. as they are not limited to the 90 day refresh but with this news it looks like I’ll be hand cranking them every 90 days again!

Some light reading on the subject;
https://security.googleblog.com/2016/10/distrusting-wosign-and-startcom.html
https://groups.google.com/forum/#!topic/mozilla.dev.security.policy/k9PBmyLCi8I%5B1-25%5D