StartCom answer to Heartbleed

It's upon the subscriber to take appropriate action since the certificate authority can't enforce which software to use. The terms of service and related fees will not change due to that.

See also the Subscriber Obligations at https://www.startssl.com/policy.pdf in particular:

   • Never share private keys with any third party and use
   adequate protection and best security practices to secure
   private keys in order prevent losses and compromises thereof.
   • Notify StartCom immediately in case of a private key
   compromise and request revocation of the affected
   certificate(s).

Regards

Signer: 	Nikolay Duhman, CVO

	StartCom Ltd.
E-Mail: 	****@startcom.org
Phone: 	+972-57-631-**-**