I had a private request to look into the .ug hijack back in May. Here's the data for that, noting that CRLset is only from yesterday and these are about expired domains so them being missing is expected.
2 bursts: 05-17: 7 certs, active for an hour and only focused on google/youtube/microsoft. 05-19/20: 32 certs, active for under 2 hours. wider spread of companies involved here. This incident is pretty publicly documented however with attribution existing. There isn't much to add that isn't already part of the public record there. On Wednesday, October 7, 2026 at 10:26:03 PM UTC+1 Wayne wrote: > Surprised there's been no mention of this yet: > https://blog.google/security/chromes-response-to-recent-cctld-registry-hijacks/ > > The tldr is that Chrome discovered widespread domain hijacks happening on > the .gh, .sl, and .as ccTLDs. While there's little information publicly > beyond that, I did look into it. > > Having checked CT logs through Censys <https://platform.censys.io>, and > cross-referencing against the CRLSet <https://github.com/agl/crlset-tools> > (10823) I've pieced together the certificates. See the attached file for > the 102 certificates - these are all on the CRLSet. > > There are 3 main bursts of compromises: > 09-22: .gh, starting on a government site, pausing for an hour, and then > just hitting common brand tlds for the next 2 hours. 23 certs total. > > 09-25: .sl, presumably with cybersecurity.gov.sl first - ZeroSSL > scrubbing issuance time makes tracing this harder. This is a much longer > compromise lasting at least 11 hours. 69 certs. > > 09-27: .as, only 10 certificates but its a more focused set of domains and > lasts at least 19 hours. > > There aren't any interesting issuance practices that stand out. The CSRs > are minimal, go through what looks like certbot defaults, but there is an > infrequent ECC wildcard -> RSA regular double-issue practice that stands > out (see below). > > As part of this I looked a bit more into keyCompromise events and > potentially overlooked siblings. In researching this I did grab every CT > issued certificate from 09-15 to 10-02 for the 3 ccTLDs. Also did targeted > queries for government TLDs from 09-01 to see if there was any potential > prior incident, and checked against normal issuance patterns. I don't think > I overlooked anything here. > > 28/63 attacked domains: EC wildcard -> RSA within 2h without the wildcard. > Across the same ccTLDs and time period only 0.3% share that characteristic. > and most of those share one hosting platform. > > If anyone can see any more interesting details in the certificates then > feel free to mention. I've included as much information as I can short of > including the certificates directly - but there's links to crt.sh and > Censys for them and I do have local copies if a researcher requires them. > -- You received this message because you are subscribed to the Google Groups "[email protected]" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion visit https://groups.google.com/a/mozilla.org/d/msgid/dev-security-policy/06fc2acb-fd7d-4a4c-82d3-97ce2834c7a8n%40mozilla.org.
ref,cctld,not_before_utc,not_after_utc,names,issuer_org,issuer_cn,issuer_trusted_at_issuance,key,precertificate,serial_hex,sha256,spki_sha256,chrome_crlset_as_of_2026-10-08,crtsh,censys UG-01,.ug,2026-05-17T20:12:13Z,2026-08-15T20:12:12Z,*.google.ug google.ug,Let's Encrypt,R13,"yes (Mozilla, Chrome)",RSA 2048,no,574ba214474c25262ea40861812554e42f1,289ed1676f42b679f2b665bb5a3f25610d9d19ac017beafa46787f1d6022986a,36ce75edea806f0985145683294e54dbdff02fc821870cf5067a308d1504be3a,blocked by key,https://crt.sh/?q=289ed1676f42b679f2b665bb5a3f25610d9d19ac017beafa46787f1d6022986a,https://platform.censys.io/certificates/289ed1676f42b679f2b665bb5a3f25610d9d19ac017beafa46787f1d6022986a UG-02,.ug,2026-05-17T20:13:54Z,2026-08-15T20:13:53Z,autodiscover.gmail.co.ug cpanel.gmail.co.ug cpcalendars.gmail.co.ug cpcontacts.gmail.co.ug gmail.co.ug mail.gmail.co.ug webdisk.gmail.co.ug webmail.gmail.co.ug www.gmail.co.ug,Let's Encrypt,R12,"yes (Mozilla, Chrome)",RSA 2048,no,5a0470855126463d1f29232cf62d7d9e49f,139a29d267936d2839a4e5e6855f858f71af179bb6676d9b7d49398809c4eb0d,5be28fcf7e31ba64fb2459e278ef032e3a09b61851952d6e85f746150fcadff1,blocked by key,https://crt.sh/?q=139a29d267936d2839a4e5e6855f858f71af179bb6676d9b7d49398809c4eb0d,https://platform.censys.io/certificates/139a29d267936d2839a4e5e6855f858f71af179bb6676d9b7d49398809c4eb0d UG-03,.ug,2026-05-17T20:32:12Z,2026-08-15T20:32:11Z,autodiscover.gmail.co.ug cpanel.gmail.co.ug cpcalendars.gmail.co.ug cpcontacts.gmail.co.ug gmail.co.ug mail.gmail.co.ug webdisk.gmail.co.ug webmail.gmail.co.ug www.gmail.co.ug,Let's Encrypt,R12,"yes (Mozilla, Chrome)",RSA 2048,no,5d6c1ab5201fa8e0829aee2ee5c595bb424,6b8a3e4b804ec789aeb0192cc5cd51d533b5b8499a4cb6435e08cef2e4b11fd5,29ec436daffa63d25f502cc9952277581876f6893feb783a0444a6f5e73aa422,blocked by key,https://crt.sh/?q=6b8a3e4b804ec789aeb0192cc5cd51d533b5b8499a4cb6435e08cef2e4b11fd5,https://platform.censys.io/certificates/6b8a3e4b804ec789aeb0192cc5cd51d533b5b8499a4cb6435e08cef2e4b11fd5 UG-04,.ug,2026-05-17T20:32:16Z,2026-08-15T20:32:15Z,*.google.co.ug google.co.ug,Let's Encrypt,R12,"yes (Mozilla, Chrome)",RSA 2048,no,54866a24e3caad80f39738523a1565ceae3,9717b1e4242ac93e7e6cafd2123130c9b6d12931c4b7d157f328dceb489ebdab,6c0702e86e0238abdb974f44a30e1a75f627cc50b4e7ce6bb1c0923b98d0e81c,blocked by key,https://crt.sh/?q=9717b1e4242ac93e7e6cafd2123130c9b6d12931c4b7d157f328dceb489ebdab,https://platform.censys.io/certificates/9717b1e4242ac93e7e6cafd2123130c9b6d12931c4b7d157f328dceb489ebdab UG-05,.ug,2026-05-17T20:32:19Z,2026-08-15T20:32:18Z,*.youtube.co.ug youtube.co.ug,Let's Encrypt,R12,"yes (Mozilla, Chrome)",RSA 2048,no,53cfa74735583b957cb4e07ac2a33ba0c34,9adb8bc0ad191ff90992722ab16f15d607b6c111e60f0aec704a09f3360a2d81,f806c390ef8d1165ef61bc77ef66de4b245a31f5bebf1029038ff31c50a63f59,blocked by key,https://crt.sh/?q=9adb8bc0ad191ff90992722ab16f15d607b6c111e60f0aec704a09f3360a2d81,https://platform.censys.io/certificates/9adb8bc0ad191ff90992722ab16f15d607b6c111e60f0aec704a09f3360a2d81 UG-06,.ug,2026-05-17T20:32:22Z,2026-08-15T20:32:21Z,*.youtube.ug youtube.ug,Let's Encrypt,R12,"yes (Mozilla, Chrome)",RSA 2048,no,564364b3594bba4b268b5603105293cdcd6,ad58d2eafb71fd2687914ce56d9d0992ea7e1a4e4046992aca95a5352ff29764,cef8710dff5e87a2830daa85e884f082033de58ed395a10f7e7c7334b5bfbe58,blocked by key,https://crt.sh/?q=ad58d2eafb71fd2687914ce56d9d0992ea7e1a4e4046992aca95a5352ff29764,https://platform.censys.io/certificates/ad58d2eafb71fd2687914ce56d9d0992ea7e1a4e4046992aca95a5352ff29764 UG-07,.ug,2026-05-17T21:13:37Z,2026-08-15T21:13:36Z,*.microsoft.co.ug microsoft.co.ug,Let's Encrypt,R12,"yes (Mozilla, Chrome)",RSA 2048,no,654d790c5e88896ce98a247837e0bf36f6c,38db9059beacf18b988fb7a524110e837cfa740c00861dc33a0dc58d783f701d,74ff95c06169906f80649e7330161093c5a2c9e1e2c6e9807d94cd8a8c4647df,not blocked,https://crt.sh/?q=38db9059beacf18b988fb7a524110e837cfa740c00861dc33a0dc58d783f701d,https://platform.censys.io/certificates/38db9059beacf18b988fb7a524110e837cfa740c00861dc33a0dc58d783f701d UG-08,.ug,2026-05-19T22:53:12Z,2026-08-17T22:53:11Z,*.google.ug google.ug,Let's Encrypt,E7,"yes (Mozilla, Chrome)",EC P-256,no,6c94d503f4737d9c6cc12a7716cc9d669f9,c9fe26dd40f9fa0a55ae914aedf5af4c1d3fa9a990081cb7de930d7a71d9e7d8,691e9f27129dbeae405ba393d7de268a1cff7fefb97a671430dc47d4b20a67e4,blocked by key,https://crt.sh/?q=c9fe26dd40f9fa0a55ae914aedf5af4c1d3fa9a990081cb7de930d7a71d9e7d8,https://platform.censys.io/certificates/c9fe26dd40f9fa0a55ae914aedf5af4c1d3fa9a990081cb7de930d7a71d9e7d8 UG-09,.ug,2026-05-19T23:00:46Z,2026-08-17T23:00:45Z,*.paypal.ug paypal.ug,Let's Encrypt,E7,"yes (Mozilla, Chrome)",EC P-256,no,6099853c92f31bc8d66129f98928a4fcab2,fc75376c98b4fab731c32d7f3c566ef742e35b9a03b7b913f1439da368c15d7f,896db0ede1ff8c7eeb77bd13a187f1d2a725b2ce5b1bb1b31ba2eec7a7328143,not blocked,https://crt.sh/?q=fc75376c98b4fab731c32d7f3c566ef742e35b9a03b7b913f1439da368c15d7f,https://platform.censys.io/certificates/fc75376c98b4fab731c32d7f3c566ef742e35b9a03b7b913f1439da368c15d7f UG-10,.ug,2026-05-19T23:09:03Z,2026-08-17T23:09:02Z,*.youtube.ug youtube.ug,Let's Encrypt,E8,"yes (Mozilla, Chrome)",EC P-256,no,5540dacb2f459a15cb549aa787d76594a1b,e38733815e4aea0f04f4a7b910bf71c69bf49b31271e94eac13dd639c5d62d31,ab4bb26e57430d6195ed84997b728528109e14de4284b635929b68d9d1abd49f,blocked by key,https://crt.sh/?q=e38733815e4aea0f04f4a7b910bf71c69bf49b31271e94eac13dd639c5d62d31,https://platform.censys.io/certificates/e38733815e4aea0f04f4a7b910bf71c69bf49b31271e94eac13dd639c5d62d31 UG-11,.ug,2026-05-19T23:12:30Z,2026-08-17T23:12:29Z,*.yahoo.ug yahoo.ug,Let's Encrypt,E8,"yes (Mozilla, Chrome)",EC P-256,no,5b00b042c35d27cb463f274c9c959bf25ed,fab6601f7b6f669e412d3cca1f66ce0f8b57fd8974ba0c8e41b4e2aeba2176f9,0b6fd8a598a623022b44403e3913cceebb72c54e8b4d5417c41c9245353749cb,not blocked,https://crt.sh/?q=fab6601f7b6f669e412d3cca1f66ce0f8b57fd8974ba0c8e41b4e2aeba2176f9,https://platform.censys.io/certificates/fab6601f7b6f669e412d3cca1f66ce0f8b57fd8974ba0c8e41b4e2aeba2176f9 UG-12,.ug,2026-05-19T23:15:14Z,2026-08-17T23:15:13Z,paypal.ug,Let's Encrypt,R13,"yes (Mozilla, Chrome)",RSA 2048,no,5c70d9aa54f02f46379354acad1ff01d513,cb2b0bb5bdce67f6703b1efe40f5779223ac1d3a646d7f090e455109ccfe95c4,5148d1136d35060138528e098d634d9314a2fa6987db2099ab1532ef60abe8d8,not blocked,https://crt.sh/?q=cb2b0bb5bdce67f6703b1efe40f5779223ac1d3a646d7f090e455109ccfe95c4,https://platform.censys.io/certificates/cb2b0bb5bdce67f6703b1efe40f5779223ac1d3a646d7f090e455109ccfe95c4 UG-13,.ug,2026-05-19T23:16:33Z,2026-08-17T23:16:32Z,google.ug,Let's Encrypt,R13,"yes (Mozilla, Chrome)",RSA 2048,no,660a970fc1ed69d22292abfcc848f0dc590,957a69cb3d6d71f1b006afb6c73d3ad08637a8fdd8e3c39c1a863848b3ce0871,2ab4ddbb5fcd621c35a8f561aa0ab67a1018c97b05113ab2a2dc839120a92d4e,blocked by key,https://crt.sh/?q=957a69cb3d6d71f1b006afb6c73d3ad08637a8fdd8e3c39c1a863848b3ce0871,https://platform.censys.io/certificates/957a69cb3d6d71f1b006afb6c73d3ad08637a8fdd8e3c39c1a863848b3ce0871 UG-14,.ug,2026-05-19T23:16:38Z,2026-08-17T23:16:37Z,youtube.ug,Let's Encrypt,R12,"yes (Mozilla, Chrome)",RSA 2048,no,6dec58e2952de0230434b61502371602e3a,8973ba160735a7964a294c392cd9796581deaaec20aff6b08d85c1a420744c81,bbf4a0b3064568aa26eb5c3aed4b6e903417534d72b08c637b8b944086535745,blocked by key,https://crt.sh/?q=8973ba160735a7964a294c392cd9796581deaaec20aff6b08d85c1a420744c81,https://platform.censys.io/certificates/8973ba160735a7964a294c392cd9796581deaaec20aff6b08d85c1a420744c81 UG-15,.ug,2026-05-19T23:22:14Z,2026-08-17T23:22:13Z,yahoo.ug,Let's Encrypt,R13,"yes (Mozilla, Chrome)",RSA 2048,no,56b4680554acd770d96ca89068b9fe1d029,690cb25264b0fe3061d16caa9e34c2a58d6138d6ae02ef13b879c72551fb5925,5de05471e07fe9fe7f0e72f40420a71990fbba1c618a69c54169034ca26c0264,not blocked,https://crt.sh/?q=690cb25264b0fe3061d16caa9e34c2a58d6138d6ae02ef13b879c72551fb5925,https://platform.censys.io/certificates/690cb25264b0fe3061d16caa9e34c2a58d6138d6ae02ef13b879c72551fb5925 UG-16,.ug,2026-05-19T23:34:19Z,2026-08-17T23:34:18Z,*.apple.ug apple.ug,Let's Encrypt,E8,"yes (Mozilla, Chrome)",EC P-256,no,69fca85be51900c111365976593f69ed89a,5260f23dc0a26fff69ff80f4c25421d9407a27075142e31f4104e1c5209f6f48,18eafb31eb63e656efee1c96399e92774d9066079e629e7c702f5a9b86da2fec,not blocked,https://crt.sh/?q=5260f23dc0a26fff69ff80f4c25421d9407a27075142e31f4104e1c5209f6f48,https://platform.censys.io/certificates/5260f23dc0a26fff69ff80f4c25421d9407a27075142e31f4104e1c5209f6f48 UG-17,.ug,2026-05-19T23:35:19Z,2026-08-17T23:35:18Z,*.amazon.ug amazon.ug,Let's Encrypt,E7,"yes (Mozilla, Chrome)",EC P-256,no,60a726d14141676fa93e649bbb2653d191a,93ef94b9399ac1caf6f03ef50e8c38f398f1b5b727d1882759a5d7cf7001f756,8ee0b441cf3a9ccc375915ec3afc7db5f57417809b3954eb10d98314c795dbea,not blocked,https://crt.sh/?q=93ef94b9399ac1caf6f03ef50e8c38f398f1b5b727d1882759a5d7cf7001f756,https://platform.censys.io/certificates/93ef94b9399ac1caf6f03ef50e8c38f398f1b5b727d1882759a5d7cf7001f756 UG-18,.ug,2026-05-19T23:36:53Z,2026-08-17T23:36:52Z,*.facebook.ug facebook.ug,Let's Encrypt,E8,"yes (Mozilla, Chrome)",EC P-256,no,56af8a2de6ab91c587ca65dba95edfb2747,c9c7a17fb5669241cb63fcfd63adea60d115bc89b5a7086a9932761e0329f994,706de630a76f8505c2a6b5ef9f9d131bd4b9fda410f8fa0b7e95792418db1d62,not blocked,https://crt.sh/?q=c9c7a17fb5669241cb63fcfd63adea60d115bc89b5a7086a9932761e0329f994,https://platform.censys.io/certificates/c9c7a17fb5669241cb63fcfd63adea60d115bc89b5a7086a9932761e0329f994 UG-19,.ug,2026-05-19T23:37:53Z,2026-08-17T23:37:52Z,*.vodafone.ug vodafone.ug,Let's Encrypt,E8,"yes (Mozilla, Chrome)",EC P-256,no,6c43685f744e578c85c6221b4d105070ee6,7ecf4ef09009288d4c0bc7e914408200567f078623b1fa50a0035d673574bd47,790ae1fe45ad09d9111bd80841a90bcd709c533dabfd4ece72a20aaf7243d03a,not blocked,https://crt.sh/?q=7ecf4ef09009288d4c0bc7e914408200567f078623b1fa50a0035d673574bd47,https://platform.censys.io/certificates/7ecf4ef09009288d4c0bc7e914408200567f078623b1fa50a0035d673574bd47 UG-20,.ug,2026-05-19T23:40:54Z,2026-08-17T23:40:53Z,amazon.ug,Let's Encrypt,R12,"yes (Mozilla, Chrome)",RSA 2048,no,6189732c656997ce573a3dc9008b803659b,1110199dd2bf62e8fc7d1ac6ded3eb658eeda2a20ad2fa2704ee99cfc2917759,f1ee5682a94f408b2e6f39bffc2202fe978cec4e326b1a25df092e606c552089,not blocked,https://crt.sh/?q=1110199dd2bf62e8fc7d1ac6ded3eb658eeda2a20ad2fa2704ee99cfc2917759,https://platform.censys.io/certificates/1110199dd2bf62e8fc7d1ac6ded3eb658eeda2a20ad2fa2704ee99cfc2917759 UG-21,.ug,2026-05-19T23:42:07Z,2026-08-17T23:42:06Z,*.microsoft.co.ug microsoft.co.ug,Let's Encrypt,E7,"yes (Mozilla, Chrome)",EC P-256,no,6b64399b3fc01b8aba266fa901d3b2e1b6d,698d55315e97a056f4123855867104038c93e9c40e7d54b1c45e11bac39df449,86ae6702f16fae4fcd47ff82727ea858fbed8acc7058089959af10e7d80956fb,not blocked,https://crt.sh/?q=698d55315e97a056f4123855867104038c93e9c40e7d54b1c45e11bac39df449,https://platform.censys.io/certificates/698d55315e97a056f4123855867104038c93e9c40e7d54b1c45e11bac39df449 UG-22,.ug,2026-05-19T23:43:54Z,2026-08-18T00:31:46Z,facebook.ug *.facebook.ug,Google Trust Services,WE1,"yes (Mozilla, Chrome)",EC P-256,yes,c7a3db62751c8161131e0ef1e944efdf,cc293026cb61629279bb2836a4c20018257ca929c9b87f03d3066934527cf8d2,5c2edd20ca5e0713541c4d32d2198f4945f0011f6bc5cdb441458503292158e3,not blocked,https://crt.sh/?q=cc293026cb61629279bb2836a4c20018257ca929c9b87f03d3066934527cf8d2,https://platform.censys.io/certificates/cc293026cb61629279bb2836a4c20018257ca929c9b87f03d3066934527cf8d2 UG-23,.ug,2026-05-19T23:44:40Z,2026-08-17T23:44:39Z,apple.ug,Let's Encrypt,R12,"yes (Mozilla, Chrome)",RSA 2048,no,5fbda5a37db44142d23138199ea9ce429ef,97b98e50c972578117526ace33d961331d0491b51d3e764eb4cb1c8523164d1d,d9a539f138509a01424ecae6fada4488279ff8d1b28fd2ab2dbc40745c23daf4,not blocked,https://crt.sh/?q=97b98e50c972578117526ace33d961331d0491b51d3e764eb4cb1c8523164d1d,https://platform.censys.io/certificates/97b98e50c972578117526ace33d961331d0491b51d3e764eb4cb1c8523164d1d UG-24,.ug,2026-05-19T23:45:52Z,2026-08-17T23:45:51Z,*.msn.co.ug msn.co.ug,Let's Encrypt,E8,"yes (Mozilla, Chrome)",EC P-256,no,657eaadb5a11748da0db81fd206d863d8b6,f11dc9354c0aa003d166704dc3ec226698fc3563d9b366acf078f9d67390f321,c78ee5deb8324955733f2afcae70d167a39a9e937d686fdc1f0818ce64c507d9,not blocked,https://crt.sh/?q=f11dc9354c0aa003d166704dc3ec226698fc3563d9b366acf078f9d67390f321,https://platform.censys.io/certificates/f11dc9354c0aa003d166704dc3ec226698fc3563d9b366acf078f9d67390f321 UG-25,.ug,2026-05-19T23:46:57Z,2026-08-17T23:46:56Z,vodafone.ug,Let's Encrypt,R12,"yes (Mozilla, Chrome)",RSA 2048,no,62b5b859597bfdf37de009041b5844f4190,f601e7910ffeb57150f8f60e99dbe8bcc00856adc26953584c0a312ecb435cc7,e8001a656a681ce2f939907ed618c9f6b31784e57f6bef21ed6a6cd0eae12fc2,not blocked,https://crt.sh/?q=f601e7910ffeb57150f8f60e99dbe8bcc00856adc26953584c0a312ecb435cc7,https://platform.censys.io/certificates/f601e7910ffeb57150f8f60e99dbe8bcc00856adc26953584c0a312ecb435cc7 UG-26,.ug,2026-05-19T23:50:00Z,2026-08-17T23:49:59Z,facebook.ug,Let's Encrypt,R12,"yes (Mozilla, Chrome)",RSA 2048,no,6cbf6b61048b918ccdcd6935ef299f8876e,eaaf0a458b5ce702852563477ca8e2cd7997be4bc0615e9a47df895144ffd004,e8e1008163b559d6a3d5abcd1a1c61adf9075ce6bcf5ff65bbf683a09adb2956,not blocked,https://crt.sh/?q=eaaf0a458b5ce702852563477ca8e2cd7997be4bc0615e9a47df895144ffd004,https://platform.censys.io/certificates/eaaf0a458b5ce702852563477ca8e2cd7997be4bc0615e9a47df895144ffd004 UG-27,.ug,2026-05-19T23:50:28Z,2026-08-18T00:36:20Z,vodafone.ug *.vodafone.ug,Google Trust Services,WE1,"yes (Mozilla, Chrome)",EC P-256,yes,5c0d227f473704c40eba8dff35fe426f,8fdcea8ef5ba4d2c894b7d17bb193763145d131a9a323fac36f14ccde5adb8d1,472e1966423895e44e70aec4d96c376bf663a60b64145b335c5d0671b3ca773c,not blocked,https://crt.sh/?q=8fdcea8ef5ba4d2c894b7d17bb193763145d131a9a323fac36f14ccde5adb8d1,https://platform.censys.io/certificates/8fdcea8ef5ba4d2c894b7d17bb193763145d131a9a323fac36f14ccde5adb8d1 UG-28,.ug,2026-05-19T23:53:46Z,2026-08-17T23:53:45Z,microsoft.co.ug,Let's Encrypt,R12,"yes (Mozilla, Chrome)",RSA 2048,no,6db2b8882b781713ae6d2c1278dd271fcf9,885b2d45dedb2a16bb692d50cce2b6a67fdab3ea4886b56223affd58e7e6b13a,7adc786ea95a53d8a37b19ab3286bb6026ca5e15762e45dedd000335201c0ba7,not blocked,https://crt.sh/?q=885b2d45dedb2a16bb692d50cce2b6a67fdab3ea4886b56223affd58e7e6b13a,https://platform.censys.io/certificates/885b2d45dedb2a16bb692d50cce2b6a67fdab3ea4886b56223affd58e7e6b13a UG-29,.ug,2026-05-19T23:54:58Z,2026-08-18T00:00:32Z,yahoo.ug *.yahoo.ug,SSL Corporation,Cloudflare TLS Issuing ECC CA 4,"yes (Mozilla, Chrome)",EC P-256,yes,9d70bd7835aa08faab83be45965f275,25a43287463660404605edcf40a903115d07970353275bb8fef79f8004729542,02b1f1a092c1e1665a1c916688c4259f3d7205385cdbbbcaea63e7be8c4453e1,not blocked,https://crt.sh/?q=25a43287463660404605edcf40a903115d07970353275bb8fef79f8004729542,https://platform.censys.io/certificates/25a43287463660404605edcf40a903115d07970353275bb8fef79f8004729542 UG-30,.ug,2026-05-19T23:55:47Z,2026-08-17T23:55:46Z,windows.co.ug,Let's Encrypt,R13,"yes (Mozilla, Chrome)",RSA 2048,no,6107c91948f436fc649d47675a4d13b3772,4ca67a07ff6f2172354a41bcfe780f2e597628d13443969c722584eb3bd47aad,b5c6f39e580f6bffb8543fb8db71fd1b357cb5ecb12e59cc013d90b1544e6385,not blocked,https://crt.sh/?q=4ca67a07ff6f2172354a41bcfe780f2e597628d13443969c722584eb3bd47aad,https://platform.censys.io/certificates/4ca67a07ff6f2172354a41bcfe780f2e597628d13443969c722584eb3bd47aad UG-31,.ug,2026-05-19T23:58:38Z,2026-08-17T23:58:37Z,*.windows.co.ug windows.co.ug,Let's Encrypt,E7,"yes (Mozilla, Chrome)",EC P-256,no,668127820dc2985042a445c82b17e9bcfe0,cdfe6c19b561b316f703569ede9976e57346cd43ec2e313bbcaa940979f98c21,2dbc9b5b21ff22350ff20e9d686caa827285e167e40762980c0b0f9430a8d749,not blocked,https://crt.sh/?q=cdfe6c19b561b316f703569ede9976e57346cd43ec2e313bbcaa940979f98c21,https://platform.censys.io/certificates/cdfe6c19b561b316f703569ede9976e57346cd43ec2e313bbcaa940979f98c21 UG-32,.ug,2026-05-19T23:59:57Z,2026-08-17T23:59:56Z,msn.co.ug,Let's Encrypt,R12,"yes (Mozilla, Chrome)",RSA 2048,no,5375fdaa620e2c46ad2aca5091ca36f67c2,c4bde7fd39db48d7a6eceaf58ffeaa68c82d306953e568e13da05080d882d64a,f89245d20c731e6b6c9269e0411b4a514020c58350775c231fc51091b7762d35,not blocked,https://crt.sh/?q=c4bde7fd39db48d7a6eceaf58ffeaa68c82d306953e568e13da05080d882d64a,https://platform.censys.io/certificates/c4bde7fd39db48d7a6eceaf58ffeaa68c82d306953e568e13da05080d882d64a UG-33,.ug,2026-05-20T00:00:00Z,2026-08-18T00:27:36Z,amazon.ug *.amazon.ug,Sectigo Limited,Sectigo Public Server Authentication CA DV E36,"yes (Mozilla, Chrome)",EC P-256,no,f33e7159baf17375600184257041ed84,9d5b813cfd952f26ea875c4122460ab2d0aeb6c75f2b0b82e19a587bbb109d2a,4c7378986645cfab659c968b4987ea6b33555ccfa7b50cc4dc06ae0334d23e94,not blocked,https://crt.sh/?q=9d5b813cfd952f26ea875c4122460ab2d0aeb6c75f2b0b82e19a587bbb109d2a,https://platform.censys.io/certificates/9d5b813cfd952f26ea875c4122460ab2d0aeb6c75f2b0b82e19a587bbb109d2a UG-34,.ug,2026-05-20T00:00:00Z,2026-08-18T00:29:02Z,apple.ug *.apple.ug,Sectigo Limited,Sectigo Public Server Authentication CA DV E36,"yes (Mozilla, Chrome)",EC P-256,no,98379c2631097603aaf751f17e68b995,bd55166a296dc40e036ab825650109da66939ad5904a176ebb859a9e8671761a,b5a6debcd8db2b86f08d751bbcba93b15088a422d6cf81a1c812e0e715e3c7e9,not blocked,https://crt.sh/?q=bd55166a296dc40e036ab825650109da66939ad5904a176ebb859a9e8671761a,https://platform.censys.io/certificates/bd55166a296dc40e036ab825650109da66939ad5904a176ebb859a9e8671761a UG-35,.ug,2026-05-20T00:00:00Z,2026-08-17T23:50:26Z,google.ug *.google.ug,Sectigo Limited,Sectigo Public Server Authentication CA DV E36,"yes (Mozilla, Chrome)",EC P-256,no,6af6ebc84eb2f3ce9dd981dfe995966b,2ced8af9b9397a49a793b12d2efc021f578c03b5bbe8513a63e9472d4405004a,9380dff56901626c0f656e3ead4fa5e560a36c01c94ce24ca2bb01a361f649ac,blocked by key,https://crt.sh/?q=2ced8af9b9397a49a793b12d2efc021f578c03b5bbe8513a63e9472d4405004a,https://platform.censys.io/certificates/2ced8af9b9397a49a793b12d2efc021f578c03b5bbe8513a63e9472d4405004a UG-36,.ug,2026-05-20T00:00:00Z,2026-08-18T00:02:06Z,youtube.ug *.youtube.ug,Sectigo Limited,Sectigo Public Server Authentication CA DV E36,"yes (Mozilla, Chrome)",EC P-256,no,dce76566e54b8699d9f83f9f8b515777,9c7efd2d22af6b06013e79d839ebe88520cd55e259dd7b3840687faedf7fdb0c,a529ba20be38a6c133e01d01b35fabebff2ae046656142ccb00d7264a2c9488e,blocked by key,https://crt.sh/?q=9c7efd2d22af6b06013e79d839ebe88520cd55e259dd7b3840687faedf7fdb0c,https://platform.censys.io/certificates/9c7efd2d22af6b06013e79d839ebe88520cd55e259dd7b3840687faedf7fdb0c UG-37,.ug,2026-05-20T00:24:27Z,2026-08-18T00:24:26Z,apple.ug,Let's Encrypt,(STAGING) Artificial Amaranth YE1,no: issuer not in CCADB,EC P-256,yes,2caf36a74bbec767707c1cec5f6f9765f099,bab952dc0cb16e334d47e315e743117b87e2bb1ac2889987ac579976c6f5258b,d7775e7f2b43e052804c2a8411110c1147d3bc97721509ac6c062f97883b1bb8,not blocked,https://crt.sh/?q=bab952dc0cb16e334d47e315e743117b87e2bb1ac2889987ac579976c6f5258b,https://platform.censys.io/certificates/bab952dc0cb16e334d47e315e743117b87e2bb1ac2889987ac579976c6f5258b UG-38,.ug,2026-05-20T00:28:34Z,2026-08-18T00:35:32Z,microsoft.co.ug *.microsoft.co.ug,SSL Corporation,Cloudflare TLS Issuing ECC CA 4,"yes (Mozilla, Chrome)",EC P-256,yes,1eceee1f01cee371fa59e456d0e9c0b9,883c44d8e1687411b177942f7b2f4112f7179ea599f6590c060dc7c6eb1c2611,64db6e17674d34cde3635ae7cb1daf16b31b6736c63b6e60d0e54858ee0a487a,not blocked,https://crt.sh/?q=883c44d8e1687411b177942f7b2f4112f7179ea599f6590c060dc7c6eb1c2611,https://platform.censys.io/certificates/883c44d8e1687411b177942f7b2f4112f7179ea599f6590c060dc7c6eb1c2611 UG-39,.ug,2026-05-20T00:36:08Z,2026-08-18T00:41:57Z,msn.co.ug *.msn.co.ug,SSL Corporation,Cloudflare TLS Issuing ECC CA 4,"yes (Mozilla, Chrome)",EC P-256,yes,62b3b3002ae61b7c1dd8deed7f117d19,f6037f3d95451790829d341beba4554d175258ae6eb49d9b1d6faac32543c6f4,9ba35a37c4d67848c893a416a35a5a4df9ad5d2827777367f8bb703841305402,not blocked,https://crt.sh/?q=f6037f3d95451790829d341beba4554d175258ae6eb49d9b1d6faac32543c6f4,https://platform.censys.io/certificates/f6037f3d95451790829d341beba4554d175258ae6eb49d9b1d6faac32543c6f4
