Then don’t come to cry the day that all you devices will be compromised , no kidding with security .
I suggest if you are not concerned : to answer to other posts and don’t hijack my concern without being constructive.
We are in 2018 and this CA was phased out started 2011...
The "ValiCert Class 2 Policy Validation Authority" root from 1999, along with about a dozen other roots from ValiCert and other CAs, are being phased out because they're only 1024 bits. 1024-bit RSA is increasingly close to being breakable. (1), so the community has decided to get rid of them in an orderly manner by 2011. (2) to prevent a major security incident and panic in the coming years.
Mozilla's stated policy was to disable them some time after December 31, 2013, and they have been actively working with the CAs to do so.
In other words, yes, you have to replace it. What's the problem? I realize it's unpleasant. (3), but you have to renew it annually anyway, and this is less work. Maybe your CA will be willing to compensate you for the inconvenience you've suffered as a predictable consequence of their decision to use an obsolescent technology long after its sell by date.
1 I wouldn't be surprised if certain agencies could factor them -- slowly -- but I might be a little paranoid.
2 Wait, what's today's date again?
3 I remember Heartbleed.
source : https://security.stackexchange.com/questions/65508/what-is-the-deal-with-valicert-ssl-root-certifica...
