CA/Forbidden or Problematic Practices

Problematic CA Practices

This page contains draft comments about various CA practices that we consider problematic for various reasons. In general these practices are not explicitly addressed by the Mozilla CA certificate policy, but we want to highlight them because they've occasioned concern in the past. Some of these practices may be addressed in future versions of the policy.

Long-lived DV certificates

To be written.

Wildcard SSL certificates

To be written.

Issuing end entity certificates directly from roots

To be written.