Is Digicert's continued use of the "Distrusted" certificates for code signing still valid?

Hello, I’m trying to understand why Digicert are still issuing signing certificates from the distrusted Symantec root certificates and as a consequence if the java code signing is still meaningful? I know for sure that they are still issing certificates from the distrusted "thawte Primary Root CA

Is Digicert's continued use of the "Distrusted" certificates for code signing still valid?

Hello, I’m trying to understand why Digicert are still issuing signing certificates from the distrusted Symantec root CAs and as a consequence if the java code signing is still meaningful?  I know for sure that they are still issing certificates from the distrusted "thawte Primary Root CA - G3"

Re: Is Digicert's continued use of the "Distrusted" certificates for code signing still valid?

Hi Bert, Thanks for your post. We will be looking into it further and hope to have a more detailed response in a few weeks. Thanks, Sean On 6/25/19 2:08 PM, Bert Eisen wrote: Hello, I’m trying to understand why Digicert are still issuing signing certificates from the distrusted Symantec ro

Re: Is Digicert's continued use of the "Distrusted" certificates for code signing still valid?

Hi Sean. Thanks for looking into this issue. I was wondering if there had been any further updates? Regards Bert On Tue, 25 Jun 2019 at 19:08, Bert Eisen wrote: > Hello, > > I’m trying to understand why Digicert are still issuing signing > certificates from the distrusted Symantec root CAs and

Re: Is Digicert's continued use of the "Distrusted" certificates for code signing still valid?

Hi Bert, On 7/22/19 9:23 AM, Bert Eisen wrote: Hi Sean. Thanks for looking into this issue.  I was wondering if there had been any further updates? Regards Bert Sorry, not yet. I was on vacation recently. I hope to have an update in the next couple of weeks. Thanks, Sean On Tue, 25 Jun 2

Re: Is Digicert's continued use of the "Distrusted" certificates for code signing still valid?

Bert, Thanks for reaching out. A few of your questions should be addressed by DigiCert but I’ll try to address the one about the root CAs included in the JDK. On Tue, 25 Jun 2019 at 19:08, Bert Eisen > wrote: Hello, I’m trying to understand why Di