[DangerousPie]

I don't think the certificates are vulnerable at all. Their private keys may have been stolen if people were using them with a vulnerable version of OpenSSL, but that has nothing to do with StartSSL certificates themselves.

[sigzero]

That is exactly right and exactly why the bug report was insane.