 |
Post AxpT9O50ilIgUGkqK8 by [email protected] |
 |
More posts by [email protected] |
|
Post #AxpSSxp7wztYtP61Qm by [email protected] |
|
0 likes, 0 repeats |
|
|
|
Hey look, another certificate authority trusted ONLY by Microsoft is issuing ce… |
|
|
|
Post #AxpSSxxzQ2z5KtF6FE by [email protected] |
|
0 likes, 1 repeats |
|
|
|
@agwa Not their first one! crt.sh is especially slow right now, but IIRC there&… |
|
|
|
Post #AxpSSy6qt64bmNOB3g by [email protected] |
|
0 likes, 1 repeats |
|
|
|
@agwa E.g. https://crt.sh/?id=12116084225 from 2024 (expired).When https://crt[… |
|
|
|
Post #AxpT9Nyd6UCEATlkNU by [email protected] |
|
0 likes, 0 repeats |
|
|
|
@mnordhoff Oh no, did I accidentally DDOS crtsh?That's the subject serial n… |
|
|
|
Post #AxpT9O50ilIgUGkqK8 by [email protected] |
|
0 likes, 1 repeats |
|
|
|
@agwa D'oh. Thank you. Makes sense. My brain glossed right over the cert &q… |
|
|
|
Post #AxqWA2ufOkpM9Ksjei by [email protected] |
|
0 likes, 0 repeats |
|
|
|
The first rogue 1.1.1.1 certificate was issued by Fina and logged to Certificat… |
|
|
|
Post #AxqWA326x4mYWQMgG8 by [email protected] |
|
0 likes, 1 repeats |
|
|
|
@agwa Some goofus named Matt noticed one of the revoked certs before — I thin… |
|
|
|
Post #AxtgcQLvQS9fyEgLK4 by [email protected] |
|
0 likes, 0 repeats |
|
|
|
@agwa While we're at it, is Oracle aware that Fina has also issued a certif… |
|
|
|
Post #AxtgcQTMym6sLKAHvU by [email protected] |
|
0 likes, 0 repeats |
|
|
|
@agwa Apparently, the cert was subsequently revoked and CRT picked it up a litt… |
|
|
|
Post #AxtgcQaSYPmUhJTwye by [email protected] |
|
0 likes, 0 repeats |
|
|
|
@agwa Also, why are they using reason #5 (cessationOfOperation)? That's wro… |
|
|
|
Post #AxtgcQhC9NAX2CdKTY by [email protected] |
|
0 likes, 0 repeats |
|
|
|
@christopherkunz These are excellent discoveries! Do you want to post this to t… |
|
|
|
Post #AxtgcQnvkKYZN5mhyS by [email protected] |
|
0 likes, 0 repeats |
|
|
|
@agwa There's now a ticket for this too: https://bugzilla.mozilla.org/show_… |
|
|
|
Post #AxtgcQyv5TLZvAvU6S by [email protected] |
|
0 likes, 0 repeats |
|
|
|
@agwa This screenshot was taken on or after 7:54 UTC and shows the cert as bein… |
|
|
|
Post #AxtgcapMTrdwSQWzaq by [email protected] |
|
0 likes, 0 repeats |
|
|
|
@christopherkunz Cool, thanks posting your comment in the bug. I also relayed y… |
|
|
|
Post #Axtge0HjJd1rhbTNOC by [email protected] |
|
0 likes, 0 repeats |
|
|
|
@christopherkunz do we know what Flow in their registration process even allows… |
|
|
|
Post #Axtge0OSuaPu2Uckt6 by [email protected] |
|
0 likes, 0 repeats |
|
|
|
@eckes I don't think that this CA has any public registration process, they… |
|
|
|
Post #AxtgeJw8FddWePWPVA by [email protected] |
|
0 likes, 0 repeats |
|
|
|
@agwa if you could post them and attribute me, that would be awesome. I was jus… |
