Unverified60% confidenceFactTime unknown
Since Android 7.0, the system no longer trusts CA certificates installed by users by default.
2
Sources
60%
Confidence
Long-term
Relevance
6/3/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedBrowsers and operating systems have built-in trusted root certificate lists, and only certificates issued by these root certificates or their subordinate intermediate CAs are considered valid.68% similarUnverifiedCertificate Transparency is a public certificate issuance logging system promoted by Google in 2013 to prevent CAs from erroneously or maliciously issuing certificates.62% similarUnverifiedWhen a CA exits the business, if the CRL/OCSP services go offline early, clients will be unable to confirm certificate status, and some strict-mode browsers or systems may report errors directly.61% similarUnverifiedApplications that ignore the system certificate store will throw errors such as UNABLE_TO_VERIFY_LEAF_SIGNATURE or self signed certificate in managed network environments.61% similarUnverifiedOnce attackers obtain the intermediate CA's private key, they can issue TLS certificates for arbitrary domains in that CA's name, and end-user browsers and operating systems typically trust intermediate certificates derived from legitimate root CAs.60% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/38697API
curl https://kongchang.com/api/v1/knowledge/claims/38697MCP
get_claim(id=38697)