Re: Do Not Accept WebTrust Audit from Deloitte Anjin South Korea

2018-04-11 Thread jumping2gether--- via dev-security-policy
Your information is incorrect. According to crt.sh, Ministry of Education CA(CA134100031)issued a mis-issued certificate to www.testssl.com on 2017-04-03 but already revoked. Deloitte Anjin didn't issue a WTCA-SSL report to the CA certificate after 2017-01-01. _

Re: Do Not Accept WebTrust Audit from Deloitte Anjin South Korea

2018-04-11 Thread jumping2gether--- via dev-security-policy
According to the official briefing by the Government of Korea on April 9 2018, The government CA discovered suspicious misissuance on April 5. They revoked the certificate on April 6 and began investigating all valid SSL certificates. src (in Korean): http://www.korea.kr/briefing/actuallyView.

Re: Do Not Accept WebTrust Audit from Deloitte Anjin South Korea

2018-04-11 Thread jumping2gether--- via dev-security-policy
Your inquiry was posted with unsubstantiated information. crt.sh logged that a certificate including www.testssl.com was issued by a CA certificate (CN: CA134100031) on 2017-02-17, but already revoked. Deloitte Anjin didn't issue a WTCA-SSL report on the CA certificate after 2017-01-01.