Jonathan, Thank you for bringing this to our attention. I have filed two bugs...
1) https://bugzilla.mozilla.org/show_bug.cgi?id=1386891 Certinomis: Cross-signing of StartCom intermediate certs, and delay in reporting it in CCADB 2) https://bugzilla.mozilla.org/show_bug.cgi?id=1386894 Add "StartCom BR SSL ICA” and "StartCom EV SSL ICA” intermediate certs to OneCRL We will look into this further, and will appreciate any further relevant information. I will also appreciate explanation from Certinomis and StartCom. Thanks, Kathleen _______________________________________________ dev-security-policy mailing list [email protected] https://lists.mozilla.org/listinfo/dev-security-policy

