On 10/12/13 16:39, Jan Schejbal wrote:
Am 2013-12-10 16:18, schrieb Rob Stradling:
The larger file with more info is here...
https://sslanalyzer.comodoca.com/igca_server_certs.zip
Thanks, very nice!
Thanks. :-)
These look interesting:
8f5d29f6ae0f6aa472268de463dd2e397ddd1b50
1972268
C=FR, O=Ministere education nationale (MENESR), OU=110 043 015, CN=AC
Infrastructures
your.server.address.com
899ec6db4ad070052aee3311de924e3dd3e995df
1973335
C=FR, O=Ministere education nationale (MENESR), OU=110 043 015, CN=AC
Infrastructures
your.server.address.com
For some reason, I have doubts about the quality of domain validation
performed in these cases...
I don't have a Certificate Transparency client set up - does anyone want
to check if these have already been revoked?
Those 2 certs are below. Neither of them are listed on the CRL. No
OCSP service is available.
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
--
Rob Stradling
Senior Research & Development Scientist
COMODO - Creating Trust Online
_______________________________________________
dev-security-policy mailing list
[email protected]
https://lists.mozilla.org/listinfo/dev-security-policy
