I don’t work on Sundays, but the list of confirmed misissued DigiNotar certs is now up to 531, with a mix of the following CNs:
*.*.com
*.*.org
*.10million.org
*.android.com
*.aol.com
*.azadegi.com
*.balatarin.com
*.comodo.com
*.digicert.com
*.globalsign.com
*.google.com
*.JanamFadayeRahbar.com
*.logmein.com
*.microsoft.com
*.mossad.gov.il
*.mozilla.org
*.RamzShekaneBozorg.com
*.SahebeDonyayeDigital.com
*.skype.com
*.startssl.com
*.thawte.com
*.torproject.org
*.walla.co.il
*.windowsupdate.com
*.wordpress.com
addons.mozilla.org
azadegi.com
Comodo Root CA
CyberTrust Root CA
DigiCert Root CA
Equifax Root CA
friends.walla.co.il
GlobalSign Root CA
login.live.com
login.yahoo.com
my.screenname.aol.com
secure.logmein.com
Thawte Root CA
twitter.com
VeriSign Root CA
wordpress.com
www.10million.org
www.balatarin.com
www.cia.gov
www.cybertrust.com
www.Equifax.com
www.facebook.com
www.globalsign.com
www.google.com
www.hamdami.com
www.mossad.gov.il
www.sis.gov.uk
www.update.microsoft.com
I’d be interested to know if there are any clients in which those first two certs would actually work.
Batches were signed on the 10th, 18th and 20th of July. I have no expiry date information for the expanded list.
There are two new intermediates I haven’t seen before: “Koninklijke Notariele Beroepsorganisatie CA” and “Stichting TTP Infos CA”. Any info about those would be appreciated.
> mossad.gov.il
Hmm. Dissing the Mossad is never a good idea.
Phil
Notaries in the Netherlands are member of the Koninklijke Notariele Beroepsorganisatie (KNB). It is their professional society. I believe membership is obligatory.
Among other things, the “Koninklijke Notariele Beroepsorganisatie CA” issues personal certificates to notaries. These certificates are used to authenticate and authorize access to online resources such as the Dutch citizens’s administration system, tax department, “last will” register, stolen documents’ register and others.
I work for the KNB daily. It’s been quite a week…
“Koninklijke Notariele Beroepsorganisatie” is Dutch, and roughly translates to royal professional association of notaries.
“Stichting TTP Infos” seems to be a small Dutch company/organization. I can’t figure out what it is. Something to do with healthcare.
“Koninklijke Notariele Beroepsorganisatie CA” is a organization for notaries, http://www.knb.nl or http://www.notaris.nl
“Stichting TTP Infos CA” : I don’t know what it is, but points to http://www.sivz.nl (an IT company in the health services area), which seems to be on the same address. Try info@sivz.nl
I meant : http://www.telefoonnummer247.nl/nederland/utrecht/houten/houten/3995ga/stichting-ttp-infos-1242012.html points to http://www.sivz.nl
Yeah, found that Stichting TTP Infos a weird one. The above linked info leads me to believe they make software for interchange of medical data using PKI related infrastructure?
According to http://www.diginotar.nl/Aanvragen/Lopendeprojecten/TenderNed/Uwinschrijvingindedigitalekluis/tabid/374/Default.aspx (last paragraph), Koninklijke Notariele Beroepsorganisatie is one of the stockholders of Diginotar.
http://www.sivz.nl/over-ivz states that they provide the following services:
Data admin & management (databeheer en datamanagement)
Data security, privacy-protection and routering (databeveiliging, privacybescherming en routering)
for healthcare providers (in the netherlands presumably), primarily mental health. Wouldn’t surprise me if they were stockholders too, just like the KNB.
Pingback: Message To Iranians | Hacking for Christ