3月 242011
 

This returns me to the reason for creating crlwatch last week – I wanted to find the someones who knowingly revoked the above listed special certificates. Anyone looking from the same starting point as I did, obviously lacks the leaf certificates in question and as a result, I had to look in a rather round about manner. Thanks to the EFF’s SSL Observatory, I was able to populate the base list for crlwatch. Armed with a nearly canonical list of all CRLs, I fetched them over Tor and parsed the CRL data into human readable text. The goal was to search for the above serial numbers and to find something linkable.

This is the result from searching the crlwatch data:

Looking for 009239d5348f40d1695a745470e1f23f43 in parsed CRLs…
Looking for 00b0b7133ed096f9b56fae91c874bd3ac0 in parsed CRLs…
Looking for 00d7558fdaf5f1105bb213282b707729a3 in parsed CRLs…
Looking for 00d8f35f4eb7872b2dab0692e315382fb0 in parsed CRLs…
Looking for 00e9028b9578e415dc1a710a2b88154447 in parsed CRLs…
Looking for 00f5c86af36162f13a64f54f6dc9587c06 in parsed CRLs…
Looking for 047ecbe9fca55f7bd09eae36e10cae1e in parsed CRLs…
Match! Serial Number: 047ECBE9FCA55F7BD09EAE36E10CAE1E
Match! Serial Number: 047ECBE9FCA55F7BD09EAE36E10CAE1E
Match! Serial Number: 047ECBE9FCA55F7BD09EAE36E10CAE1E
Looking for 392a434f0e07df1f8aa305de34e0c229 in parsed CRLs…
Match! Serial Number: 392A434F0E07DF1F8AA305DE34E0C229
Match! Serial Number: 392A434F0E07DF1F8AA305DE34E0C229
Match! Serial Number: 392A434F0E07DF1F8AA305DE34E0C229
Looking for 3e75ced46b693021218830ae86a82a71 in parsed CRLs…
Match! Serial Number: 3E75CED46B693021218830AE86A82A71
Match! Serial Number: 3E75CED46B693021218830AE86A82A71
Match! Serial Number: 3E75CED46B693021218830AE86A82A71
Looking for 72032105c50c08573d8ea5304efee8b0 in parsed CRLs…
Looking for 9239d5348f40d1695a745470e1f23f43 in parsed CRLs…
Match! Serial Number: 9239D5348F40D1695A745470E1F23F43
Match! Serial Number: 9239D5348F40D1695A745470E1F23F43
Match! Serial Number: 9239D5348F40D1695A745470E1F23F43
Looking for b0b7133ed096f9b56fae91c874bd3ac0 in parsed CRLs…
Match! Serial Number: B0B7133ED096F9B56FAE91C874BD3AC0
Match! Serial Number: B0B7133ED096F9B56FAE91C874BD3AC0
Match! Serial Number: B0B7133ED096F9B56FAE91C874BD3AC0
Looking for d7558fdaf5f1105bb213282b707729a3 in parsed CRLs…
Match! Serial Number: D7558FDAF5F1105BB213282B707729A3
Match! Serial Number: D7558FDAF5F1105BB213282B707729A3
Match! Serial Number: D7558FDAF5F1105BB213282B707729A3
Looking for d8f35f4eb7872b2dab0692e315382fb0 in parsed CRLs…
Match! Serial Number: D8F35F4EB7872B2DAB0692E315382FB0
Match! Serial Number: D8F35F4EB7872B2DAB0692E315382FB0
Match! Serial Number: D8F35F4EB7872B2DAB0692E315382FB0
Looking for f5c86af36162f13a64f54f6dc9587c06 in parsed CRLs…
Match! Serial Number: F5C86AF36162F13A64F54F6DC9587C06
Match! Serial Number: F5C86AF36162F13A64F54F6DC9587C06
Match! Serial Number: F5C86AF36162F13A64F54F6DC9587C06

Huzzah! It appears that we've found a few matches!

Here are the three matching files in human readable format:

7825aa0.crl2txt
c0f5dd5.crl2txt
ae2ff50.crl2txt

 回复

您可以使用这些 HTML 标签和属性: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <s> <strike> <strong>