Re: [44net] Accessing AMPRNet via VPN

Roland, The oldest of the three LotW root CAs hasn't been in-use for several years and can be discarded. I think I heard that they lost the private key for it, or something silly like that. The second one is their SHA1 root CA cert that they've been using up until this year, but should be kept around for a while because some people still have call sign certs in that chain. Since call sign certs are only signed for two years, you can discard that root CA too once the existing call sign certs expire. The lastest LotW root CA was created this year using modern crypto tech. It was necessary because it's expected that SHA1 will be broken within a few year, so everyone's in a hurry to move away from it. -Cory NQ1E On Tue, Oct 27, 2015 at 1:28 PM, Roland Schwarz <roland.schwarz(a)blackspace.at> wrote: