Gentoo jde na vec opravdu radikalne: jednim "patchem" vyhodili vsechny WoSign/StartSSL certifikaty, bez ohledu na datum vydani nebo platnost!
https://bugs.gentoo.org/show_bug.cgi?id=598072
V interní administraci StarSSL píšou toto:
Notice: Mozilla and Google decided to distrust all StartCom root certificates as of 21st of October, this situation will have an impact in the upcoming release of Firefox and Chrome in January. StartCom will provide an interim solution soon and will replace all the issued certificates from that date in case of requested. Meanwhile StartCom is updating all their systems and will generate new root CAs as requested by Mozilla to regain the trust in these browsers.