[Cryptography] Introducing the phone-directory certificate
Peter Gutmann
pgut001 at cs.auckland.ac.nz
Thu Sep 3 08:43:37 EDT 2015
In recent years, certificates have appeared containing hundreds of (often
unrelated) domain names. These have in the past been called Sybil
certificates, however for the one that Google is currently serving up (at
least that's visible in NZ) I'd like to propose a new name, the phone-
directory certificate. It's reassuring to note that a single certificate is
capable of reliably vouching for, well, half the planet.
Peter.
-- Snip --
2489 7031: SEQUENCE {
2493 3: OBJECT IDENTIFIER subjectAltName (2 5 29 17)
2498 7022: OCTET STRING, encapsulates {
2502 7018: SEQUENCE {
2506 10: [2] 'google.com'
2518 10: [2] '*.2mdn.net'
2530 13: [2] '*.android.com'
2545 22: [2] '*.appengine.google.com'
2569 20: [2] '*.au.doubleclick.net'
2591 11: [2] '*.cc-dt.com'
2604 18: [2] '*.cloud.google.com'
2624 20: [2] '*.de.doubleclick.net'
2646 17: [2] '*.doubleclick.com'
2665 17: [2] '*.doubleclick.net'
2684 21: [2] '*.fls.doubleclick.net'
2707 20: [2] '*.fr.doubleclick.net'
2729 22: [2] '*.google-analytics.com'
2753 11: [2] '*.google.ac'
2766 11: [2] '*.google.ad'
2779 11: [2] '*.google.ae'
2792 11: [2] '*.google.af'
2805 11: [2] '*.google.ag'
2818 11: [2] '*.google.al'
2831 11: [2] '*.google.am'
2844 11: [2] '*.google.as'
2857 11: [2] '*.google.at'
2870 11: [2] '*.google.az'
2883 11: [2] '*.google.ba'
2896 11: [2] '*.google.be'
2909 11: [2] '*.google.bf'
2922 11: [2] '*.google.bg'
2935 11: [2] '*.google.bi'
2948 11: [2] '*.google.bj'
2961 11: [2] '*.google.bs'
2974 11: [2] '*.google.bt'
2987 11: [2] '*.google.by'
3000 11: [2] '*.google.ca'
3013 12: [2] '*.google.cat'
3027 11: [2] '*.google.cc'
3040 11: [2] '*.google.cd'
3053 11: [2] '*.google.cf'
3066 11: [2] '*.google.cg'
3079 11: [2] '*.google.ch'
3092 11: [2] '*.google.ci'
3105 11: [2] '*.google.cl'
3118 11: [2] '*.google.cm'
3131 11: [2] '*.google.cn'
3144 14: [2] '*.google.co.ao'
3160 14: [2] '*.google.co.bw'
3176 14: [2] '*.google.co.ck'
3192 14: [2] '*.google.co.cr'
3208 14: [2] '*.google.co.hu'
3224 14: [2] '*.google.co.id'
3240 14: [2] '*.google.co.il'
3256 14: [2] '*.google.co.im'
3272 14: [2] '*.google.co.in'
3288 14: [2] '*.google.co.je'
3304 14: [2] '*.google.co.jp'
3320 14: [2] '*.google.co.ke'
3336 14: [2] '*.google.co.kr'
3352 14: [2] '*.google.co.ls'
3368 14: [2] '*.google.co.ma'
3384 14: [2] '*.google.co.mz'
3400 14: [2] '*.google.co.nz'
3416 14: [2] '*.google.co.th'
3432 14: [2] '*.google.co.tz'
3448 14: [2] '*.google.co.ug'
3464 14: [2] '*.google.co.uk'
3480 14: [2] '*.google.co.uz'
3496 14: [2] '*.google.co.ve'
3512 14: [2] '*.google.co.vi'
3528 14: [2] '*.google.co.za'
3544 14: [2] '*.google.co.zm'
3560 14: [2] '*.google.co.zw'
3576 12: [2] '*.google.com'
3590 15: [2] '*.google.com.af'
3607 15: [2] '*.google.com.ag'
3624 15: [2] '*.google.com.ai'
3641 15: [2] '*.google.com.ar'
3658 15: [2] '*.google.com.au'
3675 15: [2] '*.google.com.bd'
3692 15: [2] '*.google.com.bh'
3709 15: [2] '*.google.com.bn'
3726 15: [2] '*.google.com.bo'
3743 15: [2] '*.google.com.br'
3760 15: [2] '*.google.com.by'
3777 15: [2] '*.google.com.bz'
3794 15: [2] '*.google.com.cn'
3811 15: [2] '*.google.com.co'
3828 15: [2] '*.google.com.cu'
3845 15: [2] '*.google.com.cy'
3862 15: [2] '*.google.com.do'
3879 15: [2] '*.google.com.ec'
3896 15: [2] '*.google.com.eg'
3913 15: [2] '*.google.com.et'
3930 15: [2] '*.google.com.fj'
3947 15: [2] '*.google.com.ge'
3964 15: [2] '*.google.com.gh'
3981 15: [2] '*.google.com.gi'
3998 15: [2] '*.google.com.gr'
4015 15: [2] '*.google.com.gt'
4032 15: [2] '*.google.com.hk'
4049 15: [2] '*.google.com.iq'
4066 15: [2] '*.google.com.jm'
4083 15: [2] '*.google.com.jo'
4100 15: [2] '*.google.com.kh'
4117 15: [2] '*.google.com.kw'
4134 15: [2] '*.google.com.lb'
4151 15: [2] '*.google.com.ly'
4168 15: [2] '*.google.com.mm'
4185 15: [2] '*.google.com.mt'
4202 15: [2] '*.google.com.mx'
4219 15: [2] '*.google.com.my'
4236 15: [2] '*.google.com.na'
4253 15: [2] '*.google.com.nf'
4270 15: [2] '*.google.com.ng'
4287 15: [2] '*.google.com.ni'
4304 15: [2] '*.google.com.np'
4321 15: [2] '*.google.com.nr'
4338 15: [2] '*.google.com.om'
4355 15: [2] '*.google.com.pa'
4372 15: [2] '*.google.com.pe'
4389 15: [2] '*.google.com.pg'
4406 15: [2] '*.google.com.ph'
4423 15: [2] '*.google.com.pk'
4440 15: [2] '*.google.com.pl'
4457 15: [2] '*.google.com.pr'
4474 15: [2] '*.google.com.py'
4491 15: [2] '*.google.com.qa'
4508 15: [2] '*.google.com.ru'
4525 15: [2] '*.google.com.sa'
4542 15: [2] '*.google.com.sb'
4559 15: [2] '*.google.com.sg'
4576 15: [2] '*.google.com.sl'
4593 15: [2] '*.google.com.sv'
4610 15: [2] '*.google.com.tj'
4627 15: [2] '*.google.com.tn'
4644 15: [2] '*.google.com.tr'
4661 15: [2] '*.google.com.tw'
4678 15: [2] '*.google.com.ua'
4695 15: [2] '*.google.com.uy'
4712 15: [2] '*.google.com.vc'
4729 15: [2] '*.google.com.ve'
4746 15: [2] '*.google.com.vn'
4763 11: [2] '*.google.cv'
4776 11: [2] '*.google.cz'
4789 11: [2] '*.google.de'
4802 11: [2] '*.google.dj'
4815 11: [2] '*.google.dk'
4828 11: [2] '*.google.dm'
4841 11: [2] '*.google.dz'
4854 11: [2] '*.google.ee'
4867 11: [2] '*.google.es'
4880 12: [2] '*.google.eus'
4894 11: [2] '*.google.fi'
4907 11: [2] '*.google.fm'
4920 11: [2] '*.google.fr'
4933 12: [2] '*.google.frl'
4947 11: [2] '*.google.ga'
4960 12: [2] '*.google.gal'
4974 11: [2] '*.google.ge'
4987 11: [2] '*.google.gg'
5000 11: [2] '*.google.gl'
5013 11: [2] '*.google.gm'
5026 11: [2] '*.google.gp'
5039 11: [2] '*.google.gr'
5052 11: [2] '*.google.gy'
5065 11: [2] '*.google.hk'
5078 11: [2] '*.google.hn'
5091 11: [2] '*.google.hr'
5104 11: [2] '*.google.ht'
5117 11: [2] '*.google.hu'
5130 11: [2] '*.google.ie'
5143 11: [2] '*.google.im'
5156 11: [2] '*.google.in'
5169 13: [2] '*.google.info'
5184 11: [2] '*.google.iq'
5197 11: [2] '*.google.ir'
5210 11: [2] '*.google.is'
5223 11: [2] '*.google.it'
5236 14: [2] '*.google.it.ao'
5252 11: [2] '*.google.je'
5265 11: [2] '*.google.jo'
5278 13: [2] '*.google.jobs'
5293 11: [2] '*.google.jp'
5306 11: [2] '*.google.kg'
5319 11: [2] '*.google.ki'
5332 11: [2] '*.google.kz'
5345 11: [2] '*.google.la'
5358 11: [2] '*.google.li'
5371 11: [2] '*.google.lk'
5384 11: [2] '*.google.lt'
5397 11: [2] '*.google.lu'
5410 11: [2] '*.google.lv'
5423 11: [2] '*.google.md'
5436 11: [2] '*.google.me'
5449 11: [2] '*.google.mg'
5462 11: [2] '*.google.mk'
5475 11: [2] '*.google.ml'
5488 11: [2] '*.google.mn'
5501 11: [2] '*.google.ms'
5514 11: [2] '*.google.mu'
5527 11: [2] '*.google.mv'
5540 11: [2] '*.google.mw'
5553 11: [2] '*.google.ne'
5566 14: [2] '*.google.ne.jp'
5582 12: [2] '*.google.net'
5596 11: [2] '*.google.ng'
5609 11: [2] '*.google.nl'
5622 11: [2] '*.google.no'
5635 11: [2] '*.google.nr'
5648 11: [2] '*.google.nu'
5661 15: [2] '*.google.off.ai'
5678 11: [2] '*.google.pk'
5691 11: [2] '*.google.pl'
5704 11: [2] '*.google.pn'
5717 11: [2] '*.google.ps'
5730 11: [2] '*.google.pt'
5743 11: [2] '*.google.ro'
5756 11: [2] '*.google.rs'
5769 11: [2] '*.google.ru'
5782 11: [2] '*.google.rw'
5795 11: [2] '*.google.sc'
5808 11: [2] '*.google.se'
5821 11: [2] '*.google.sh'
5834 11: [2] '*.google.si'
5847 11: [2] '*.google.sk'
5860 11: [2] '*.google.sm'
5873 11: [2] '*.google.sn'
5886 11: [2] '*.google.so'
5899 11: [2] '*.google.sr'
5912 11: [2] '*.google.st'
5925 11: [2] '*.google.td'
5938 12: [2] '*.google.tel'
5952 11: [2] '*.google.tg'
5965 11: [2] '*.google.tk'
5978 11: [2] '*.google.tl'
5991 11: [2] '*.google.tm'
6004 11: [2] '*.google.tn'
6017 11: [2] '*.google.to'
6030 11: [2] '*.google.tt'
6043 11: [2] '*.google.ua'
6056 11: [2] '*.google.us'
6069 11: [2] '*.google.uz'
6082 11: [2] '*.google.vg'
6095 11: [2] '*.google.vu'
6108 11: [2] '*.google.ws'
6121 18: [2] '*.googleadapis.com'
6141 21: [2] '*.googleadsserving.cn'
6164 15: [2] '*.googleapis.cn'
6181 20: [2] '*.googlecommerce.com'
6203 17: [2] '*.googlevideo.com'
6222 12: [2] '*.gstatic.cn'
6236 13: [2] '*.gstatic.com'
6251 10: [2] '*.gvt1.com'
6263 10: [2] '*.gvt2.com'
6275 20: [2] '*.jp.doubleclick.net'
6297 20: [2] '*.metric.gstatic.com'
6319 20: [2] '*.uk.doubleclick.net'
6341 12: [2] '*.urchin.com'
6355 16: [2] '*.url.google.com'
6373 22: [2] '*.youtube-nocookie.com'
6397 13: [2] '*.youtube.com'
6412 22: [2] '*.youtubeeducation.com'
6436 11: [2] '*.ytimg.com'
6449 21: [2] 'ad.mo.doubleclick.net'
6472 11: [2] 'android.com'
6485 15: [2] 'doubleclick.net'
6502 4: [2] 'g.co'
6508 6: [2] 'goo.gl'
6516 20: [2] 'google-analytics.com'
6538 9: [2] 'google.ac'
6549 9: [2] 'google.ad'
6560 9: [2] 'google.ae'
6571 9: [2] 'google.af'
6582 9: [2] 'google.ag'
6593 9: [2] 'google.al'
6604 9: [2] 'google.am'
6615 9: [2] 'google.as'
6626 9: [2] 'google.at'
6637 9: [2] 'google.az'
6648 9: [2] 'google.ba'
6659 9: [2] 'google.be'
6670 9: [2] 'google.bf'
6681 9: [2] 'google.bg'
6692 9: [2] 'google.bi'
6703 9: [2] 'google.bj'
6714 9: [2] 'google.bs'
6725 9: [2] 'google.bt'
6736 9: [2] 'google.by'
6747 9: [2] 'google.ca'
6758 10: [2] 'google.cat'
6770 9: [2] 'google.cc'
6781 9: [2] 'google.cd'
6792 9: [2] 'google.cf'
6803 9: [2] 'google.cg'
6814 9: [2] 'google.ch'
6825 9: [2] 'google.ci'
6836 9: [2] 'google.cl'
6847 9: [2] 'google.cm'
6858 9: [2] 'google.cn'
6869 12: [2] 'google.co.ao'
6883 12: [2] 'google.co.bw'
6897 12: [2] 'google.co.ck'
6911 12: [2] 'google.co.cr'
6925 12: [2] 'google.co.hu'
6939 12: [2] 'google.co.id'
6953 12: [2] 'google.co.il'
6967 12: [2] 'google.co.im'
6981 12: [2] 'google.co.in'
6995 12: [2] 'google.co.je'
7009 12: [2] 'google.co.jp'
7023 12: [2] 'google.co.ke'
7037 12: [2] 'google.co.kr'
7051 12: [2] 'google.co.ls'
7065 12: [2] 'google.co.ma'
7079 12: [2] 'google.co.mz'
7093 12: [2] 'google.co.nz'
7107 12: [2] 'google.co.th'
7121 12: [2] 'google.co.tz'
7135 12: [2] 'google.co.ug'
7149 12: [2] 'google.co.uk'
7163 12: [2] 'google.co.uz'
7177 12: [2] 'google.co.ve'
7191 12: [2] 'google.co.vi'
7205 12: [2] 'google.co.za'
7219 12: [2] 'google.co.zm'
7233 12: [2] 'google.co.zw'
7247 13: [2] 'google.com.af'
7262 13: [2] 'google.com.ag'
7277 13: [2] 'google.com.ai'
7292 13: [2] 'google.com.ar'
7307 13: [2] 'google.com.au'
7322 13: [2] 'google.com.bd'
7337 13: [2] 'google.com.bh'
7352 13: [2] 'google.com.bn'
7367 13: [2] 'google.com.bo'
7382 13: [2] 'google.com.br'
7397 13: [2] 'google.com.by'
7412 13: [2] 'google.com.bz'
7427 13: [2] 'google.com.cn'
7442 13: [2] 'google.com.co'
7457 13: [2] 'google.com.cu'
7472 13: [2] 'google.com.cy'
7487 13: [2] 'google.com.do'
7502 13: [2] 'google.com.ec'
7517 13: [2] 'google.com.eg'
7532 13: [2] 'google.com.et'
7547 13: [2] 'google.com.fj'
7562 13: [2] 'google.com.ge'
7577 13: [2] 'google.com.gh'
7592 13: [2] 'google.com.gi'
7607 13: [2] 'google.com.gr'
7622 13: [2] 'google.com.gt'
7637 13: [2] 'google.com.hk'
7652 13: [2] 'google.com.iq'
7667 13: [2] 'google.com.jm'
7682 13: [2] 'google.com.jo'
7697 13: [2] 'google.com.kh'
7712 13: [2] 'google.com.kw'
7727 13: [2] 'google.com.lb'
7742 13: [2] 'google.com.ly'
7757 13: [2] 'google.com.mm'
7772 13: [2] 'google.com.mt'
7787 13: [2] 'google.com.mx'
7802 13: [2] 'google.com.my'
7817 13: [2] 'google.com.na'
7832 13: [2] 'google.com.nf'
7847 13: [2] 'google.com.ng'
7862 13: [2] 'google.com.ni'
7877 13: [2] 'google.com.np'
7892 13: [2] 'google.com.nr'
7907 13: [2] 'google.com.om'
7922 13: [2] 'google.com.pa'
7937 13: [2] 'google.com.pe'
7952 13: [2] 'google.com.pg'
7967 13: [2] 'google.com.ph'
7982 13: [2] 'google.com.pk'
7997 13: [2] 'google.com.pl'
8012 13: [2] 'google.com.pr'
8027 13: [2] 'google.com.py'
8042 13: [2] 'google.com.qa'
8057 13: [2] 'google.com.ru'
8072 13: [2] 'google.com.sa'
8087 13: [2] 'google.com.sb'
8102 13: [2] 'google.com.sg'
8117 13: [2] 'google.com.sl'
8132 13: [2] 'google.com.sv'
8147 13: [2] 'google.com.tj'
8162 13: [2] 'google.com.tn'
8177 13: [2] 'google.com.tr'
8192 13: [2] 'google.com.tw'
8207 13: [2] 'google.com.ua'
8222 13: [2] 'google.com.uy'
8237 13: [2] 'google.com.vc'
8252 13: [2] 'google.com.ve'
8267 13: [2] 'google.com.vn'
8282 9: [2] 'google.cv'
8293 9: [2] 'google.cz'
8304 9: [2] 'google.de'
8315 9: [2] 'google.dj'
8326 9: [2] 'google.dk'
8337 9: [2] 'google.dm'
8348 9: [2] 'google.dz'
8359 9: [2] 'google.ee'
8370 9: [2] 'google.es'
8381 10: [2] 'google.eus'
8393 9: [2] 'google.fi'
8404 9: [2] 'google.fm'
8415 9: [2] 'google.fr'
8426 10: [2] 'google.frl'
8438 9: [2] 'google.ga'
8449 10: [2] 'google.gal'
8461 9: [2] 'google.ge'
8472 9: [2] 'google.gg'
8483 9: [2] 'google.gl'
8494 9: [2] 'google.gm'
8505 9: [2] 'google.gp'
8516 9: [2] 'google.gr'
8527 9: [2] 'google.gy'
8538 9: [2] 'google.hk'
8549 9: [2] 'google.hn'
8560 9: [2] 'google.hr'
8571 9: [2] 'google.ht'
8582 9: [2] 'google.hu'
8593 9: [2] 'google.ie'
8604 9: [2] 'google.im'
8615 9: [2] 'google.in'
8626 11: [2] 'google.info'
8639 9: [2] 'google.iq'
8650 9: [2] 'google.ir'
8661 9: [2] 'google.is'
8672 9: [2] 'google.it'
8683 12: [2] 'google.it.ao'
8697 9: [2] 'google.je'
8708 9: [2] 'google.jo'
8719 11: [2] 'google.jobs'
8732 9: [2] 'google.jp'
8743 9: [2] 'google.kg'
8754 9: [2] 'google.ki'
8765 9: [2] 'google.kz'
8776 9: [2] 'google.la'
8787 9: [2] 'google.li'
8798 9: [2] 'google.lk'
8809 9: [2] 'google.lt'
8820 9: [2] 'google.lu'
8831 9: [2] 'google.lv'
8842 9: [2] 'google.md'
8853 9: [2] 'google.me'
8864 9: [2] 'google.mg'
8875 9: [2] 'google.mk'
8886 9: [2] 'google.ml'
8897 9: [2] 'google.mn'
8908 9: [2] 'google.ms'
8919 9: [2] 'google.mu'
8930 9: [2] 'google.mv'
8941 9: [2] 'google.mw'
8952 9: [2] 'google.ne'
8963 12: [2] 'google.ne.jp'
8977 10: [2] 'google.net'
8989 9: [2] 'google.ng'
9000 9: [2] 'google.nl'
9011 9: [2] 'google.no'
9022 9: [2] 'google.nr'
9033 9: [2] 'google.nu'
9044 13: [2] 'google.off.ai'
9059 9: [2] 'google.pk'
9070 9: [2] 'google.pl'
9081 9: [2] 'google.pn'
9092 9: [2] 'google.ps'
9103 9: [2] 'google.pt'
9114 9: [2] 'google.ro'
9125 9: [2] 'google.rs'
9136 9: [2] 'google.ru'
9147 9: [2] 'google.rw'
9158 9: [2] 'google.sc'
9169 9: [2] 'google.se'
9180 9: [2] 'google.sh'
9191 9: [2] 'google.si'
9202 9: [2] 'google.sk'
9213 9: [2] 'google.sm'
9224 9: [2] 'google.sn'
9235 9: [2] 'google.so'
9246 9: [2] 'google.sr'
9257 9: [2] 'google.st'
9268 9: [2] 'google.td'
9279 10: [2] 'google.tel'
9291 9: [2] 'google.tg'
9302 9: [2] 'google.tk'
9313 9: [2] 'google.tl'
9324 9: [2] 'google.tm'
9335 9: [2] 'google.tn'
9346 9: [2] 'google.to'
9357 9: [2] 'google.tt'
9368 9: [2] 'google.ua'
9379 9: [2] 'google.us'
9390 9: [2] 'google.uz'
9401 9: [2] 'google.vg'
9412 9: [2] 'google.vu'
9423 9: [2] 'google.ws'
9434 18: [2] 'googlecommerce.com'
9454 11: [2] 'gstatic.com'
9467 10: [2] 'urchin.com'
9479 8: [2] 'youtu.be'
9489 11: [2] 'youtube.com'
9502 20: [2] 'youtubeeducation.com'
: }
: }
: }
More information about the cryptography
mailing list