Subject: | Needs update to distrust WoSign and StartCom |
Mozilla upstream are distrusting these CAs due to some really sketchy dealings:
https://blog.mozilla.org/security/2016/10/24/distrusting-new-wosign-and-startcom-certificates/
And Mozilla::CA should probably be synced to reflect this.