CNNIC是错案吗？

choice

你们有好好看文吗

Chrome 41 (Branch point in Q1 2015)
Sites with end-entity c**ificates that expire between 1 January 2016 and 31 December 2016 (inclusive), and which include a SHA-1-based signature as part of the c**ificate chain, will be treated as “secure, but with minor errors”.

Sites with end-entity c**ificates that expire on or after 1 January 2017, and which include a SHA-1-based signature as part of the c**ificate chain, will be treated as “affirmatively insecure”. Subresources from such domain will be treated as “active mixed content”.