Per Chrome's all_logs_list.json, the Argon2027h1 log is Qualified but not yet Usable. That means that some up-to-date Chrome instances may trust it (as your testing found), but not all Chrome instances around the world. It generally takes about 70 days for a log to transition from Qualified to Usable, to account for this propagation delay.
On Tue, Dec 2, 2025, 08:16 Arabella Barks <[email protected]> wrote: > Hey Andrew, > > Thanks for expanding on the topic! I know following up in a further thread > comment isn’t ideal, > but I’m curious -- where did you learn that "Google Argon 2027h1, which is > usable by Apple, is not yet usable by Chrome or Mozilla"? From my testing, > Google Argon 2027h1 has actually been verified to work on Chrome: > > > Regards, > Ara. > On Tuesday, December 2, 2025 at 9:23:36 PM UTC+8 Andrew Ayer wrote: > >> Hi Arabella, >> >> I recommend raising this on the ct-policy mailing list ( >> https://groups.google.com/a/chromium.org/g/ct-policy). >> >> Though my question would be - why is Certum issuing certificates with >> embedded SCTs from a log that's not listed as Qualified or Usable in >> Apple's log list? >> >> This certificate also contains an SCT from Google Argon 2027h1, which >> while Usable by Apple, is not yet Usable by Chrome or Mozilla. >> >> Regards, >> Andrew >> >> >> On Mon, 1 Dec 2025 19:51:28 -0800 (PST) >> Arabella Barks <[email protected]> wrote: >> >> > [image: 9312cc9414c2e964bffb1f53f6d215e5.png] >> > >> > DigiCert 'Wyvern2027h1' >> > LogID: 00 1A 5D 1A 1C 2D 93 75 B6 48 55 78 F8 2F 71 A1 AE 6E EF 39 7D >> > 29 7C 8A E3 15 7B CA DE E1 A0 1E >> > DigiCert 'sphinx2027h1' >> > LogID: 46 A2 39 67 C6 0D B6 46 87 C6 6F 3D F9 99 94 76 93 A6 A6 11 20 >> > 84 57 D5 55 E7 E3 D0 A1 D9 B6 46 >> > >> > >> > -- >> > You received this message because you are subscribed to the Google >> > Groups "[email protected]" group. To unsubscribe from >> > this group and stop receiving emails from it, send an email to >> > [email protected]. To view this discussion >> > visit >> > >> https://groups.google.com/a/mozilla.org/d/msgid/dev-security-policy/e437bda8-611f-47fd-95c5-bba884394f36n%40mozilla.org. >> >> > -- > You received this message because you are subscribed to the Google Groups " > [email protected]" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > To view this discussion visit > https://groups.google.com/a/mozilla.org/d/msgid/dev-security-policy/4ee3e1f9-d132-44ad-b522-c3469ff687acn%40mozilla.org > <https://groups.google.com/a/mozilla.org/d/msgid/dev-security-policy/4ee3e1f9-d132-44ad-b522-c3469ff687acn%40mozilla.org?utm_medium=email&utm_source=footer> > . > -- You received this message because you are subscribed to the Google Groups "[email protected]" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion visit https://groups.google.com/a/mozilla.org/d/msgid/dev-security-policy/CAEmnErf0fsny7dMWWd_sYvc0dx87DuirWgaeygoQMKQnX%3Dujmg%40mail.gmail.com.
