Hacker News Reader

If you want to verify that you no longer support Diginotar CA, this should give you a warning: https://www.diginotar.nl/

View on HN

I get redirected to http there, but this should show the untrusted CA: https://www.diginotar.com/Products/ExtendedValidationSSL/tab...

I get redirected to http after clicking on the first link, just like you did, but when I visit the URL you posted in Chrome (on OS X), I'm able to view the encrypted page without a warning.

I changed the settings in Keychain Access hours ago.

Does anyone know what's going on?

I got the same result. For some reason Chrome trusts intermediate certificate even if the root certificate is marked as untrusted. Screenshot: http://i.imgur.com/qW6V3.png (Chrome 14.0.835.109 beta)

Lock with the warning icon is here because "Unable to check whether the certificate has been revoked."

Maybe their intermediate is signed by some other root CA?

Update: filed a bug http://crbug.com/94732

I get redirected to a non-ssl page ( http://www.diginotar.nl/Default.aspx ) instead, no warning? (Chrome)

I got a warning on Firefox, but Opera redirected to http://.

Safari 5.1 warns.

Don't just remove the Diginotar root cert, import it to the "Untrusted Certificates" list and it will be blocked stone cold.

Reply on news.ycombinator.com