StartCom SSL Sertifikaları Artık Geçersiz

Yaşanan çok ciddi bir sorumsuzca davranış ve akabinde gelen mesnetsiz işler ve zaten işiayağa düşmesine sebep olan sertifikasyon sebebiyle WoSign ve StartCom tarafından sunulan StartSSL sertifikalarının da arasında olduğu ve uzun süreli ücretsiz SSL hizmeti sunan yerler olan aşağıdaki yerlerden alınan sertifikalar artık tarayıcılar tarafından güvensiz olarak işaretlenecek.

Örneğin Chrome 5.6 sürümünden itibaren StartCom'dan alınan Ekim 2016 sonrası sertifikaları artık Güvensiz olarak gösterecek. Safari ve Mozilla'da da durum aynı şekilde.

Eğer güvenilirliği yüksek bir projeniz varsa, 3 kuruş kazancı kâr bilip son günü beklemeden farklı bir platformdan SSL sertifikası almanız ve uygulamanız yerinde olacaktır.

Domains - red are the two CAs and their parent company, yellow are ancillary products and services:
startssl.com
wosign.com
wosign.us
360.com
360totalsecurity.com
startcom.org

Referanslar:
https://security.googleblog.com/2016...-startcom.html
https://blog.mozilla.org/security/20...-certificates/
https://support.apple.com/en-us/HT204132

Startcom 2018 den itibaren ssl vermeyi kapatıyormuş, mail geldi


This is an automatically generated email, please do not reply.

Dear customer,

As you are surely aware, the browser makers distrusted StartCom around a year ago and therefore all the end entity certificates newly issued by StartCom are not trusted by default in browsers.

The browsers imposed some conditions in order for the certificates to be re-accepted. While StartCom believes that these conditions have been met, it appears there are still certain difficulties forthcoming. Considering this situation, the owners of StartCom have decided to terminate the company as a Certification Authority as mentioned in Startcom´s website.

StartCom will stop issuing new certificates starting from January 1st, 2018 and will provide only CRL and OCSP services for two more years.

StartCom would like to thank you for your support during this difficult time.

StartCom is contacting some other CAs to provide you with the certificates needed. In case you don´t want us to provide you an alternative, please, contact us at certmaster@startcomca.com

Please let us know if you need any further assistance with the transition process. We deeply apologize for any inconveniences that this may cause.


Best regards,

StartCom Certification Authority