Thanks. I filed https://bugzilla.mozilla.org/show_bug.cgi?id=1620772
On Fri, Mar 6, 2020 at 9:48 PM Matt Palmer via dev-security-policy < [email protected]> wrote: > (Pre) Certificate https://crt.sh/?id=2531502044 has been issued with a > known > weak key, specifically Debian weak key 2048/i386/rnd/pid17691. I believe > this issuance to be in contravention of SSL.com's CPS, version 1.8, section > 6.1.1.2, which states "SSL.com shall reject a certificate request if the > request has a known weak Private Key". > > - Matt > > _______________________________________________ > dev-security-policy mailing list > [email protected] > https://lists.mozilla.org/listinfo/dev-security-policy > _______________________________________________ dev-security-policy mailing list [email protected] https://lists.mozilla.org/listinfo/dev-security-policy
