← Start Commercial (StartCom) Ltd. cases
Bugzilla #1015767
Technical Compliance
startcom: still issuing < 2048 bit certificates
RESOLVED
Start Commercial (StartCom) Ltd.
AI Summary
The case addresses the issue of StartCom issuing certificates with key lengths less than the required 2048 bits. A specific instance of a 2043-bit certificate was reported, prompting an investigation. Although the issue was deemed low risk, it raised concerns about compliance with security standards. The case was ultimately resolved with assurances that such occurrences would be addressed.
Chronology
- Initial report of a 2043-bit certificate
- Case resolved with acknowledgment of the issue
Participants
Kurt Roeckx
Eddy Nigg (StartCom)
Gervase Markham
External References
Similar Local Cases
Entrust: Non-BR-Compliant OCSP Responder
Visa: Non-BR-Compliant OCSP Responders
Consorci AOC: Non-BR-Compliant OCSP Responders
StartCom: Certificates using secp256k1
Sectigo: Late termination of privileged access to Certificate Systems
Firmaprofesional: Non-BR-Compliant OCSP Responders
Amazon Trust Services: Failure to comply with RFC 5280
Sectigo: Reseller ZeroSSL and Private Key Generation