This step was announced some time ago, and since certificates usually need to be replaced frequently, there should be very few problematic certificates, if the CAs did their job.
This step was announced some time ago, and since certificates usually need to be replaced frequently, there should be very few problematic certificates, if the CAs did their job.
Most people will buy certs valid for a few years, or around a couple of dozen Chrome-releases, and forget about them until they expire.
From my experience, among the things deployed in the world of IT, I would argue they are among the things replaced most infrequently.
So I'm curious... What makes you say certificates needs to be replaced frequently? What's the use-cases you are referring to?
However the proper test should be done using https://www.ssllabs.com/ssltest/
> there should be very few problematic certificates, if the CAs did their job.
The cert was bought through Network Solutions in the past year. They are not exactly amateurs.
I've already had to spend 45 minutes researching and trying to solve this and I still have to waste more time resolving this.