Certificate Patrol

评分3星，满分5星

由 Douglas Godfrey 发表于 March 16, 2014 · 永久链接

When I see a suspect certificate change I reject the new certificate but it just comes back again. If I reject a changed certificate the new certificate should stay rejected.

I generally always reject a certificate change if the new certificate has an older start/end date than the old certificate or if both the authority and domain change at the same time.