On Sep 4, 2013, at 2:15 PM, Andy Steingruebl <steingra at gmail.com> wrote: > As of Jan-2014 CAs are forbidden from issuing/signing anything less than 2048 certs. For some value of "forbidden". :-) --Paul Hoffman