Unverified50% confidenceFactExact time
If a CA wants its certificates to be trusted by browsers, it must pass third-party audits such as WebTrust and continuously meet the CA/B Forum baseline requirements.
1
Sources
50%
Confidence
Long-term
Relevance
10/22/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedSite operators should confirm whether their own certificate chain includes the affected intermediate CA, and monitor trust store update announcements from the CA/Browser Forum and mainstream browser vendors to replace affected certificates in a timely manner.76% similarVerifiedAll publicly trusted CAs must submit certificate information to at least one CT log when issuing a certificate, so when a new website applies for an SSL certificate, its domain information appears in the public log.74% similarUnverifiedOnce attackers obtain the intermediate CA's private key, they can issue TLS certificates for arbitrary domains in that CA's name, and end-user browsers and operating systems typically trust intermediate certificates derived from legitimate root CAs.73% similarUnverifiedFacebook's open-source Certspotter and Google's crt.sh query platform both support searching CT logs across the entire network by domain name and can be configured to send email or Webhook alerts.65% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1086347API
curl https://kongchang.com/api/v1/knowledge/claims/1086347MCP
get_claim(id=1086347)