upvote
> They just check that the CA is using a FIPS compliant key generator, and then basic things like following a logged, standard, multi person process.

FIPS-compliant key generator allowed key to be 4 ?

No, they just didn't check thoroughly enough

reply
Oh for sure. And at the time these were done, I'd guess cracking them was a lot more work. But still. 4.
reply
This key 4 was from a new ceremony, they must have hit the highest security key just recently and wrapped around.
reply