[Cryptography] Introducing the phone-directory certificate

Peter Gutmann pgut001 at cs.auckland.ac.nz
Thu Sep 3 08:43:37 EDT 2015


In recent years, certificates have appeared containing hundreds of (often
unrelated) domain names.  These have in the past been called Sybil
certificates, however for the one that Google is currently serving up (at
least that's visible in NZ) I'd like to propose a new name, the phone-
directory certificate.  It's reassuring to note that a single certificate is
capable of reliably vouching for, well, half the planet.

Peter.

-- Snip --

2489 7031:                 SEQUENCE {
2493    3:                   OBJECT IDENTIFIER subjectAltName (2 5 29 17)
2498 7022:                   OCTET STRING, encapsulates {
2502 7018:                     SEQUENCE {
2506   10:                       [2] 'google.com'
2518   10:                       [2] '*.2mdn.net'
2530   13:                       [2] '*.android.com'
2545   22:                       [2] '*.appengine.google.com'
2569   20:                       [2] '*.au.doubleclick.net'
2591   11:                       [2] '*.cc-dt.com'
2604   18:                       [2] '*.cloud.google.com'
2624   20:                       [2] '*.de.doubleclick.net'
2646   17:                       [2] '*.doubleclick.com'
2665   17:                       [2] '*.doubleclick.net'
2684   21:                       [2] '*.fls.doubleclick.net'
2707   20:                       [2] '*.fr.doubleclick.net'
2729   22:                       [2] '*.google-analytics.com'
2753   11:                       [2] '*.google.ac'
2766   11:                       [2] '*.google.ad'
2779   11:                       [2] '*.google.ae'
2792   11:                       [2] '*.google.af'
2805   11:                       [2] '*.google.ag'
2818   11:                       [2] '*.google.al'
2831   11:                       [2] '*.google.am'
2844   11:                       [2] '*.google.as'
2857   11:                       [2] '*.google.at'
2870   11:                       [2] '*.google.az'
2883   11:                       [2] '*.google.ba'
2896   11:                       [2] '*.google.be'
2909   11:                       [2] '*.google.bf'
2922   11:                       [2] '*.google.bg'
2935   11:                       [2] '*.google.bi'
2948   11:                       [2] '*.google.bj'
2961   11:                       [2] '*.google.bs'
2974   11:                       [2] '*.google.bt'
2987   11:                       [2] '*.google.by'
3000   11:                       [2] '*.google.ca'
3013   12:                       [2] '*.google.cat'
3027   11:                       [2] '*.google.cc'
3040   11:                       [2] '*.google.cd'
3053   11:                       [2] '*.google.cf'
3066   11:                       [2] '*.google.cg'
3079   11:                       [2] '*.google.ch'
3092   11:                       [2] '*.google.ci'
3105   11:                       [2] '*.google.cl'
3118   11:                       [2] '*.google.cm'
3131   11:                       [2] '*.google.cn'
3144   14:                       [2] '*.google.co.ao'
3160   14:                       [2] '*.google.co.bw'
3176   14:                       [2] '*.google.co.ck'
3192   14:                       [2] '*.google.co.cr'
3208   14:                       [2] '*.google.co.hu'
3224   14:                       [2] '*.google.co.id'
3240   14:                       [2] '*.google.co.il'
3256   14:                       [2] '*.google.co.im'
3272   14:                       [2] '*.google.co.in'
3288   14:                       [2] '*.google.co.je'
3304   14:                       [2] '*.google.co.jp'
3320   14:                       [2] '*.google.co.ke'
3336   14:                       [2] '*.google.co.kr'
3352   14:                       [2] '*.google.co.ls'
3368   14:                       [2] '*.google.co.ma'
3384   14:                       [2] '*.google.co.mz'
3400   14:                       [2] '*.google.co.nz'
3416   14:                       [2] '*.google.co.th'
3432   14:                       [2] '*.google.co.tz'
3448   14:                       [2] '*.google.co.ug'
3464   14:                       [2] '*.google.co.uk'
3480   14:                       [2] '*.google.co.uz'
3496   14:                       [2] '*.google.co.ve'
3512   14:                       [2] '*.google.co.vi'
3528   14:                       [2] '*.google.co.za'
3544   14:                       [2] '*.google.co.zm'
3560   14:                       [2] '*.google.co.zw'
3576   12:                       [2] '*.google.com'
3590   15:                       [2] '*.google.com.af'
3607   15:                       [2] '*.google.com.ag'
3624   15:                       [2] '*.google.com.ai'
3641   15:                       [2] '*.google.com.ar'
3658   15:                       [2] '*.google.com.au'
3675   15:                       [2] '*.google.com.bd'
3692   15:                       [2] '*.google.com.bh'
3709   15:                       [2] '*.google.com.bn'
3726   15:                       [2] '*.google.com.bo'
3743   15:                       [2] '*.google.com.br'
3760   15:                       [2] '*.google.com.by'
3777   15:                       [2] '*.google.com.bz'
3794   15:                       [2] '*.google.com.cn'
3811   15:                       [2] '*.google.com.co'
3828   15:                       [2] '*.google.com.cu'
3845   15:                       [2] '*.google.com.cy'
3862   15:                       [2] '*.google.com.do'
3879   15:                       [2] '*.google.com.ec'
3896   15:                       [2] '*.google.com.eg'
3913   15:                       [2] '*.google.com.et'
3930   15:                       [2] '*.google.com.fj'
3947   15:                       [2] '*.google.com.ge'
3964   15:                       [2] '*.google.com.gh'
3981   15:                       [2] '*.google.com.gi'
3998   15:                       [2] '*.google.com.gr'
4015   15:                       [2] '*.google.com.gt'
4032   15:                       [2] '*.google.com.hk'
4049   15:                       [2] '*.google.com.iq'
4066   15:                       [2] '*.google.com.jm'
4083   15:                       [2] '*.google.com.jo'
4100   15:                       [2] '*.google.com.kh'
4117   15:                       [2] '*.google.com.kw'
4134   15:                       [2] '*.google.com.lb'
4151   15:                       [2] '*.google.com.ly'
4168   15:                       [2] '*.google.com.mm'
4185   15:                       [2] '*.google.com.mt'
4202   15:                       [2] '*.google.com.mx'
4219   15:                       [2] '*.google.com.my'
4236   15:                       [2] '*.google.com.na'
4253   15:                       [2] '*.google.com.nf'
4270   15:                       [2] '*.google.com.ng'
4287   15:                       [2] '*.google.com.ni'
4304   15:                       [2] '*.google.com.np'
4321   15:                       [2] '*.google.com.nr'
4338   15:                       [2] '*.google.com.om'
4355   15:                       [2] '*.google.com.pa'
4372   15:                       [2] '*.google.com.pe'
4389   15:                       [2] '*.google.com.pg'
4406   15:                       [2] '*.google.com.ph'
4423   15:                       [2] '*.google.com.pk'
4440   15:                       [2] '*.google.com.pl'
4457   15:                       [2] '*.google.com.pr'
4474   15:                       [2] '*.google.com.py'
4491   15:                       [2] '*.google.com.qa'
4508   15:                       [2] '*.google.com.ru'
4525   15:                       [2] '*.google.com.sa'
4542   15:                       [2] '*.google.com.sb'
4559   15:                       [2] '*.google.com.sg'
4576   15:                       [2] '*.google.com.sl'
4593   15:                       [2] '*.google.com.sv'
4610   15:                       [2] '*.google.com.tj'
4627   15:                       [2] '*.google.com.tn'
4644   15:                       [2] '*.google.com.tr'
4661   15:                       [2] '*.google.com.tw'
4678   15:                       [2] '*.google.com.ua'
4695   15:                       [2] '*.google.com.uy'
4712   15:                       [2] '*.google.com.vc'
4729   15:                       [2] '*.google.com.ve'
4746   15:                       [2] '*.google.com.vn'
4763   11:                       [2] '*.google.cv'
4776   11:                       [2] '*.google.cz'
4789   11:                       [2] '*.google.de'
4802   11:                       [2] '*.google.dj'
4815   11:                       [2] '*.google.dk'
4828   11:                       [2] '*.google.dm'
4841   11:                       [2] '*.google.dz'
4854   11:                       [2] '*.google.ee'
4867   11:                       [2] '*.google.es'
4880   12:                       [2] '*.google.eus'
4894   11:                       [2] '*.google.fi'
4907   11:                       [2] '*.google.fm'
4920   11:                       [2] '*.google.fr'
4933   12:                       [2] '*.google.frl'
4947   11:                       [2] '*.google.ga'
4960   12:                       [2] '*.google.gal'
4974   11:                       [2] '*.google.ge'
4987   11:                       [2] '*.google.gg'
5000   11:                       [2] '*.google.gl'
5013   11:                       [2] '*.google.gm'
5026   11:                       [2] '*.google.gp'
5039   11:                       [2] '*.google.gr'
5052   11:                       [2] '*.google.gy'
5065   11:                       [2] '*.google.hk'
5078   11:                       [2] '*.google.hn'
5091   11:                       [2] '*.google.hr'
5104   11:                       [2] '*.google.ht'
5117   11:                       [2] '*.google.hu'
5130   11:                       [2] '*.google.ie'
5143   11:                       [2] '*.google.im'
5156   11:                       [2] '*.google.in'
5169   13:                       [2] '*.google.info'
5184   11:                       [2] '*.google.iq'
5197   11:                       [2] '*.google.ir'
5210   11:                       [2] '*.google.is'
5223   11:                       [2] '*.google.it'
5236   14:                       [2] '*.google.it.ao'
5252   11:                       [2] '*.google.je'
5265   11:                       [2] '*.google.jo'
5278   13:                       [2] '*.google.jobs'
5293   11:                       [2] '*.google.jp'
5306   11:                       [2] '*.google.kg'
5319   11:                       [2] '*.google.ki'
5332   11:                       [2] '*.google.kz'
5345   11:                       [2] '*.google.la'
5358   11:                       [2] '*.google.li'
5371   11:                       [2] '*.google.lk'
5384   11:                       [2] '*.google.lt'
5397   11:                       [2] '*.google.lu'
5410   11:                       [2] '*.google.lv'
5423   11:                       [2] '*.google.md'
5436   11:                       [2] '*.google.me'
5449   11:                       [2] '*.google.mg'
5462   11:                       [2] '*.google.mk'
5475   11:                       [2] '*.google.ml'
5488   11:                       [2] '*.google.mn'
5501   11:                       [2] '*.google.ms'
5514   11:                       [2] '*.google.mu'
5527   11:                       [2] '*.google.mv'
5540   11:                       [2] '*.google.mw'
5553   11:                       [2] '*.google.ne'
5566   14:                       [2] '*.google.ne.jp'
5582   12:                       [2] '*.google.net'
5596   11:                       [2] '*.google.ng'
5609   11:                       [2] '*.google.nl'
5622   11:                       [2] '*.google.no'
5635   11:                       [2] '*.google.nr'
5648   11:                       [2] '*.google.nu'
5661   15:                       [2] '*.google.off.ai'
5678   11:                       [2] '*.google.pk'
5691   11:                       [2] '*.google.pl'
5704   11:                       [2] '*.google.pn'
5717   11:                       [2] '*.google.ps'
5730   11:                       [2] '*.google.pt'
5743   11:                       [2] '*.google.ro'
5756   11:                       [2] '*.google.rs'
5769   11:                       [2] '*.google.ru'
5782   11:                       [2] '*.google.rw'
5795   11:                       [2] '*.google.sc'
5808   11:                       [2] '*.google.se'
5821   11:                       [2] '*.google.sh'
5834   11:                       [2] '*.google.si'
5847   11:                       [2] '*.google.sk'
5860   11:                       [2] '*.google.sm'
5873   11:                       [2] '*.google.sn'
5886   11:                       [2] '*.google.so'
5899   11:                       [2] '*.google.sr'
5912   11:                       [2] '*.google.st'
5925   11:                       [2] '*.google.td'
5938   12:                       [2] '*.google.tel'
5952   11:                       [2] '*.google.tg'
5965   11:                       [2] '*.google.tk'
5978   11:                       [2] '*.google.tl'
5991   11:                       [2] '*.google.tm'
6004   11:                       [2] '*.google.tn'
6017   11:                       [2] '*.google.to'
6030   11:                       [2] '*.google.tt'
6043   11:                       [2] '*.google.ua'
6056   11:                       [2] '*.google.us'
6069   11:                       [2] '*.google.uz'
6082   11:                       [2] '*.google.vg'
6095   11:                       [2] '*.google.vu'
6108   11:                       [2] '*.google.ws'
6121   18:                       [2] '*.googleadapis.com'
6141   21:                       [2] '*.googleadsserving.cn'
6164   15:                       [2] '*.googleapis.cn'
6181   20:                       [2] '*.googlecommerce.com'
6203   17:                       [2] '*.googlevideo.com'
6222   12:                       [2] '*.gstatic.cn'
6236   13:                       [2] '*.gstatic.com'
6251   10:                       [2] '*.gvt1.com'
6263   10:                       [2] '*.gvt2.com'
6275   20:                       [2] '*.jp.doubleclick.net'
6297   20:                       [2] '*.metric.gstatic.com'
6319   20:                       [2] '*.uk.doubleclick.net'
6341   12:                       [2] '*.urchin.com'
6355   16:                       [2] '*.url.google.com'
6373   22:                       [2] '*.youtube-nocookie.com'
6397   13:                       [2] '*.youtube.com'
6412   22:                       [2] '*.youtubeeducation.com'
6436   11:                       [2] '*.ytimg.com'
6449   21:                       [2] 'ad.mo.doubleclick.net'
6472   11:                       [2] 'android.com'
6485   15:                       [2] 'doubleclick.net'
6502    4:                       [2] 'g.co'
6508    6:                       [2] 'goo.gl'
6516   20:                       [2] 'google-analytics.com'
6538    9:                       [2] 'google.ac'
6549    9:                       [2] 'google.ad'
6560    9:                       [2] 'google.ae'
6571    9:                       [2] 'google.af'
6582    9:                       [2] 'google.ag'
6593    9:                       [2] 'google.al'
6604    9:                       [2] 'google.am'
6615    9:                       [2] 'google.as'
6626    9:                       [2] 'google.at'
6637    9:                       [2] 'google.az'
6648    9:                       [2] 'google.ba'
6659    9:                       [2] 'google.be'
6670    9:                       [2] 'google.bf'
6681    9:                       [2] 'google.bg'
6692    9:                       [2] 'google.bi'
6703    9:                       [2] 'google.bj'
6714    9:                       [2] 'google.bs'
6725    9:                       [2] 'google.bt'
6736    9:                       [2] 'google.by'
6747    9:                       [2] 'google.ca'
6758   10:                       [2] 'google.cat'
6770    9:                       [2] 'google.cc'
6781    9:                       [2] 'google.cd'
6792    9:                       [2] 'google.cf'
6803    9:                       [2] 'google.cg'
6814    9:                       [2] 'google.ch'
6825    9:                       [2] 'google.ci'
6836    9:                       [2] 'google.cl'
6847    9:                       [2] 'google.cm'
6858    9:                       [2] 'google.cn'
6869   12:                       [2] 'google.co.ao'
6883   12:                       [2] 'google.co.bw'
6897   12:                       [2] 'google.co.ck'
6911   12:                       [2] 'google.co.cr'
6925   12:                       [2] 'google.co.hu'
6939   12:                       [2] 'google.co.id'
6953   12:                       [2] 'google.co.il'
6967   12:                       [2] 'google.co.im'
6981   12:                       [2] 'google.co.in'
6995   12:                       [2] 'google.co.je'
7009   12:                       [2] 'google.co.jp'
7023   12:                       [2] 'google.co.ke'
7037   12:                       [2] 'google.co.kr'
7051   12:                       [2] 'google.co.ls'
7065   12:                       [2] 'google.co.ma'
7079   12:                       [2] 'google.co.mz'
7093   12:                       [2] 'google.co.nz'
7107   12:                       [2] 'google.co.th'
7121   12:                       [2] 'google.co.tz'
7135   12:                       [2] 'google.co.ug'
7149   12:                       [2] 'google.co.uk'
7163   12:                       [2] 'google.co.uz'
7177   12:                       [2] 'google.co.ve'
7191   12:                       [2] 'google.co.vi'
7205   12:                       [2] 'google.co.za'
7219   12:                       [2] 'google.co.zm'
7233   12:                       [2] 'google.co.zw'
7247   13:                       [2] 'google.com.af'
7262   13:                       [2] 'google.com.ag'
7277   13:                       [2] 'google.com.ai'
7292   13:                       [2] 'google.com.ar'
7307   13:                       [2] 'google.com.au'
7322   13:                       [2] 'google.com.bd'
7337   13:                       [2] 'google.com.bh'
7352   13:                       [2] 'google.com.bn'
7367   13:                       [2] 'google.com.bo'
7382   13:                       [2] 'google.com.br'
7397   13:                       [2] 'google.com.by'
7412   13:                       [2] 'google.com.bz'
7427   13:                       [2] 'google.com.cn'
7442   13:                       [2] 'google.com.co'
7457   13:                       [2] 'google.com.cu'
7472   13:                       [2] 'google.com.cy'
7487   13:                       [2] 'google.com.do'
7502   13:                       [2] 'google.com.ec'
7517   13:                       [2] 'google.com.eg'
7532   13:                       [2] 'google.com.et'
7547   13:                       [2] 'google.com.fj'
7562   13:                       [2] 'google.com.ge'
7577   13:                       [2] 'google.com.gh'
7592   13:                       [2] 'google.com.gi'
7607   13:                       [2] 'google.com.gr'
7622   13:                       [2] 'google.com.gt'
7637   13:                       [2] 'google.com.hk'
7652   13:                       [2] 'google.com.iq'
7667   13:                       [2] 'google.com.jm'
7682   13:                       [2] 'google.com.jo'
7697   13:                       [2] 'google.com.kh'
7712   13:                       [2] 'google.com.kw'
7727   13:                       [2] 'google.com.lb'
7742   13:                       [2] 'google.com.ly'
7757   13:                       [2] 'google.com.mm'
7772   13:                       [2] 'google.com.mt'
7787   13:                       [2] 'google.com.mx'
7802   13:                       [2] 'google.com.my'
7817   13:                       [2] 'google.com.na'
7832   13:                       [2] 'google.com.nf'
7847   13:                       [2] 'google.com.ng'
7862   13:                       [2] 'google.com.ni'
7877   13:                       [2] 'google.com.np'
7892   13:                       [2] 'google.com.nr'
7907   13:                       [2] 'google.com.om'
7922   13:                       [2] 'google.com.pa'
7937   13:                       [2] 'google.com.pe'
7952   13:                       [2] 'google.com.pg'
7967   13:                       [2] 'google.com.ph'
7982   13:                       [2] 'google.com.pk'
7997   13:                       [2] 'google.com.pl'
8012   13:                       [2] 'google.com.pr'
8027   13:                       [2] 'google.com.py'
8042   13:                       [2] 'google.com.qa'
8057   13:                       [2] 'google.com.ru'
8072   13:                       [2] 'google.com.sa'
8087   13:                       [2] 'google.com.sb'
8102   13:                       [2] 'google.com.sg'
8117   13:                       [2] 'google.com.sl'
8132   13:                       [2] 'google.com.sv'
8147   13:                       [2] 'google.com.tj'
8162   13:                       [2] 'google.com.tn'
8177   13:                       [2] 'google.com.tr'
8192   13:                       [2] 'google.com.tw'
8207   13:                       [2] 'google.com.ua'
8222   13:                       [2] 'google.com.uy'
8237   13:                       [2] 'google.com.vc'
8252   13:                       [2] 'google.com.ve'
8267   13:                       [2] 'google.com.vn'
8282    9:                       [2] 'google.cv'
8293    9:                       [2] 'google.cz'
8304    9:                       [2] 'google.de'
8315    9:                       [2] 'google.dj'
8326    9:                       [2] 'google.dk'
8337    9:                       [2] 'google.dm'
8348    9:                       [2] 'google.dz'
8359    9:                       [2] 'google.ee'
8370    9:                       [2] 'google.es'
8381   10:                       [2] 'google.eus'
8393    9:                       [2] 'google.fi'
8404    9:                       [2] 'google.fm'
8415    9:                       [2] 'google.fr'
8426   10:                       [2] 'google.frl'
8438    9:                       [2] 'google.ga'
8449   10:                       [2] 'google.gal'
8461    9:                       [2] 'google.ge'
8472    9:                       [2] 'google.gg'
8483    9:                       [2] 'google.gl'
8494    9:                       [2] 'google.gm'
8505    9:                       [2] 'google.gp'
8516    9:                       [2] 'google.gr'
8527    9:                       [2] 'google.gy'
8538    9:                       [2] 'google.hk'
8549    9:                       [2] 'google.hn'
8560    9:                       [2] 'google.hr'
8571    9:                       [2] 'google.ht'
8582    9:                       [2] 'google.hu'
8593    9:                       [2] 'google.ie'
8604    9:                       [2] 'google.im'
8615    9:                       [2] 'google.in'
8626   11:                       [2] 'google.info'
8639    9:                       [2] 'google.iq'
8650    9:                       [2] 'google.ir'
8661    9:                       [2] 'google.is'
8672    9:                       [2] 'google.it'
8683   12:                       [2] 'google.it.ao'
8697    9:                       [2] 'google.je'
8708    9:                       [2] 'google.jo'
8719   11:                       [2] 'google.jobs'
8732    9:                       [2] 'google.jp'
8743    9:                       [2] 'google.kg'
8754    9:                       [2] 'google.ki'
8765    9:                       [2] 'google.kz'
8776    9:                       [2] 'google.la'
8787    9:                       [2] 'google.li'
8798    9:                       [2] 'google.lk'
8809    9:                       [2] 'google.lt'
8820    9:                       [2] 'google.lu'
8831    9:                       [2] 'google.lv'
8842    9:                       [2] 'google.md'
8853    9:                       [2] 'google.me'
8864    9:                       [2] 'google.mg'
8875    9:                       [2] 'google.mk'
8886    9:                       [2] 'google.ml'
8897    9:                       [2] 'google.mn'
8908    9:                       [2] 'google.ms'
8919    9:                       [2] 'google.mu'
8930    9:                       [2] 'google.mv'
8941    9:                       [2] 'google.mw'
8952    9:                       [2] 'google.ne'
8963   12:                       [2] 'google.ne.jp'
8977   10:                       [2] 'google.net'
8989    9:                       [2] 'google.ng'
9000    9:                       [2] 'google.nl'
9011    9:                       [2] 'google.no'
9022    9:                       [2] 'google.nr'
9033    9:                       [2] 'google.nu'
9044   13:                       [2] 'google.off.ai'
9059    9:                       [2] 'google.pk'
9070    9:                       [2] 'google.pl'
9081    9:                       [2] 'google.pn'
9092    9:                       [2] 'google.ps'
9103    9:                       [2] 'google.pt'
9114    9:                       [2] 'google.ro'
9125    9:                       [2] 'google.rs'
9136    9:                       [2] 'google.ru'
9147    9:                       [2] 'google.rw'
9158    9:                       [2] 'google.sc'
9169    9:                       [2] 'google.se'
9180    9:                       [2] 'google.sh'
9191    9:                       [2] 'google.si'
9202    9:                       [2] 'google.sk'
9213    9:                       [2] 'google.sm'
9224    9:                       [2] 'google.sn'
9235    9:                       [2] 'google.so'
9246    9:                       [2] 'google.sr'
9257    9:                       [2] 'google.st'
9268    9:                       [2] 'google.td'
9279   10:                       [2] 'google.tel'
9291    9:                       [2] 'google.tg'
9302    9:                       [2] 'google.tk'
9313    9:                       [2] 'google.tl'
9324    9:                       [2] 'google.tm'
9335    9:                       [2] 'google.tn'
9346    9:                       [2] 'google.to'
9357    9:                       [2] 'google.tt'
9368    9:                       [2] 'google.ua'
9379    9:                       [2] 'google.us'
9390    9:                       [2] 'google.uz'
9401    9:                       [2] 'google.vg'
9412    9:                       [2] 'google.vu'
9423    9:                       [2] 'google.ws'
9434   18:                       [2] 'googlecommerce.com'
9454   11:                       [2] 'gstatic.com'
9467   10:                       [2] 'urchin.com'
9479    8:                       [2] 'youtu.be'
9489   11:                       [2] 'youtube.com'
9502   20:                       [2] 'youtubeeducation.com'
         :                       }
         :                     }
         :                   }


More information about the cryptography mailing list