搬运工:
Today we have revoked (via CRL and OCSP) all 3 of the cross-certificates that we'd issued to WoSign:
https://crt.sh/?id=3223853
https://crt.sh/?id=12716343
https://crt.sh/?id=12716433
I think the combination of other measures previously taken (the removal of the "UTN - DATACorp SGC" root certificate, the revocation/blacklisting of the cross-certificates issued to "UTN - DATACorp SGC", and the technical constraints in these 3 cross-certificates issued to WoSign) should mean that these 3 cross-certificates are already not trusted by Mozilla users.
https://groups.google.com/forum/#!topic/mozilla.dev.security.policy/k9PBmyLCi8I%5B226-250%5D
https://bugzilla.mozilla.org/show_bug.cgi?id=906611#c2
Today we have revoked (via CRL and OCSP) all 3 of the cross-certificates that we'd issued to WoSign:
https://crt.sh/?id=3223853
https://crt.sh/?id=12716343
https://crt.sh/?id=12716433
I think the combination of other measures previously taken (the removal of the "UTN - DATACorp SGC" root certificate, the revocation/blacklisting of the cross-certificates issued to "UTN - DATACorp SGC", and the technical constraints in these 3 cross-certificates issued to WoSign) should mean that these 3 cross-certificates are already not trusted by Mozilla users.
https://groups.google.com/forum/#!topic/mozilla.dev.security.policy/k9PBmyLCi8I%5B226-250%5D
https://bugzilla.mozilla.org/show_bug.cgi?id=906611#c2