Hi,

>> ---
>> @nocombat writes: SSL Observatory: select count(Subject) from
>> valid_certs where Issuer like '%diginotar%' â01
>> ---
> 
> They've only issued 700-odd SSL certs?  Wow, that's low.  OTOH since their 
> gravy train is mainly built around the Dutch government's PKI letter of 
> marque 
> [0], I could imagine that their generic SSL cert business doesn't get much 
> attention.

I have some values from our own scans - scans conducted against hosts on
the Alexa Top 1M list [1]. Here are the domains they have certified on
that list, almost exclusively .nl:

pki_crawl=# SELECT DISTINCT ON(hashcert) host FROM
certificates_28mar2011_nosni WHERE issuer ILIKE '%DigiNotar%';

             host
------------------------------
 www.ebita.nl
 www.notaris.nl
 www.ind.nl
 overijsselkiest.nl
 spijkenisse.nl
 www.salland.nl
 www.vwa.nl
 atom86.net
 nuon.nl
 vlaardingen.nl
 www.liander.nl
 www.studielink.nl
 senternovem.nl
 cbpweb.nl
 akd.nl
 overheid.nl
 www.rdw.nl
 www.haarlemmermeer.nl
 www.mijnpensioenoverzicht.nl
 nijmegen.nl
 rechtspraak.nl
 officielebekendmakingen.nl
 www.rijkswaterstaat.nl
 www.funprice.nl
 www.digid.nl
 www.norrod.nl
 www.woningnet.nl
 www.zuid-holland.nl
 www.bloemendaal.nl
(29 rows)


[1] We'll make the datasets public soon-ish.

Ralph

-- 
Dipl.-Inform. Ralph Holz
I8: Network Architectures and Services
Technische Universität München
http://www.net.in.tum.de/de/mitarbeiter/holz/

Attachment: signature.asc
Description: OpenPGP digital signature

_______________________________________________
cryptography mailing list
cryptography@randombit.net
http://lists.randombit.net/mailman/listinfo/cryptography

Reply via email to