Unverified50% confidenceSolutionExact time
Site operators should confirm whether their own certificate chain includes the affected intermediate CA, and monitor trust store update announcements from the CA/Browser Forum and mainstream browser vendors to replace affected certificates in a timely manner.
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
10/22/2026
First Seen
Valid until: 1/20/2027
Sources
Related Entities
Related Claims
VerifiedAll publicly trusted CAs must submit certificate information to at least one CT log when issuing a certificate, so when a new website applies for an SSL certificate, its domain information appears in the public log.73% similarUnverifiedOnce attackers obtain the intermediate CA's private key, they can issue TLS certificates for arbitrary domains in that CA's name, and end-user browsers and operating systems typically trust intermediate certificates derived from legitimate root CAs.69% similarUnverifiedIn recent years the CA/Browser Forum has continued to tighten requirements on domain validation, for example limiting the reuse period of validation and requiring stricter random value generation and multi-location validation.69% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1084720API
curl https://kongchang.com/api/v1/knowledge/claims/1084720MCP
get_claim(id=1084720)