Closed
Bug 1484798
Opened 7 years ago
Closed 7 years ago
DigiCert: *.sslsimplified.com compromised private key
Categories
(CA Program :: CA Certificate Compliance, task)
Tracking
(Not tracked)
RESOLVED
FIXED
People
(Reporter: wthayer, Assigned: wthayer)
References
Details
(Whiteboard: [ca-onecrl])
Hanno Böck reported the following key compromise, then DigiCert confirmed it and revoked the certificate. It should be added to OneCRL.
=====================
Some of you may remember the discussion about embedded private keys in
Blizzard's battle.net software here:
https://groups.google.com/forum/#!msg/mozilla.dev.security.policy/pk039T_wPrI/VYi629oGCwAJ
One of the certificates with a compromised key back then was issued by
Digicert:
https://crt.sh/?id=287530764
I noticed that a new certificate for a different domain, but with that
same private key has been issued:
https://crt.sh/?id=638323656
I tried to report it to revoke@digicert.com - but that address was
replying with an error message...
=====================
Certificate:
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
|
||
Updated•7 years ago
|
Whiteboard: [ca-onecrl]
|
Assignee | |
Comment 1•7 years ago
|
||
This certificate has been added to OneCRL.
Status: NEW → RESOLVED
Closed: 7 years ago
Resolution: --- → FIXED
|
||
Updated•3 years ago
|
Product: NSS → CA Program
|
||
Updated•2 years ago
|
Summary: *.sslsimplified.com compromised private key → DigiCert: *.sslsimplified.com compromised private key
You need to log in
before you can comment on or make changes to this bug.
Description
•