Skip to content

Instantly share code, notes, and snippets.

View pzb's full-sized avatar

Peter Bowen pzb

78 followers · 0 following
View GitHub Profile
@pzb
pzb / gov-domains.txt
Created June 21, 2016 23:54
18f.gov
29palmsbomi-nsn.gov
511maine.gov
511ny.gov
511tx.gov
511wi.gov
9-11commission.gov
911.gov
911commission.gov
aapi.gov
@pzb
pzb / redacted.pem
Created June 15, 2016 21:41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@pzb
pzb / censys-example.rb
Last active April 16, 2017 17:15
#!/usr/bin/ruby
require 'json'
require 'curb'
require 'openssl'
require 'base64'
require 'pp'
require 'net/http'
$stdout.sync = true
def do_something_with_cert(cert_der)
@pzb
pzb / mozilla-nss-children.tsv
Last active April 28, 2016 04:17
We can't make this file beautiful and searchable because it's too large.
Certificate Serial Number Certificate Hash (SHA-256) Issuer Subject Has NameConstraints
4835703278459775245913641 dce44bafee25bf1bb34b6eb195d55af46039aff92edbb9395f82b28fe4d20c5b C=BE,O=GlobalSign nv-sa,OU=RootSign Partners CA,CN=GlobalSign RootSign Partners CA CN=NSW-DET-INT-CA1,OU=ITD,O=Department of Education and Training,C=AU false
101883224110697654265552566296414015628 14239787e8fec7dffa5f4c570b721b96c169acca3f4e95bc3057a3f8a60d7eef CN=Certum CA,O=Unizeto Sp. z o.o.,C=PL CN=Certum Level IV CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL false
6772195039640580314 ec33d17093c0f45bb8a27eb9e305696583801f6144b8e9d49e73a8e30a2a2e20 CN=Cartão de Cidadão 003,OU=ECEstado,O=SCEE - Sistema de Certificação Electrónica do Estado,C=PT CN=EC de Assinatura Digital Qualificada do Cartão de Cidadão 0010,OU=subECEstado,O=Cartão de Cidadão,C=PT false
6667400235953340 caee820c636713d7f143cf673bbdeba16aed37c4346a8693050bec8c36932e42 CN=DFN-Verein PCA Global - G01,OU=DFN-PKI,O=DFN-Verein,C=DE emailAddres
@pzb
pzb / multi-san-ip.tsv
Last active April 25, 2016 19:51
Subject Alternative Names Subject
10.0.0.10, autodiscover.tag.com.au, exchangeserver, exchangeserver.tag.local, localhost, mail.tag.com.au, owa.tag.com.au, tag.com.au CN=tag.com.au,OU=Domain Control Validated,C=AU
10.0.0.15, autodiscover.4eagleexpress.com, mail.4eagleexpress.com, orders.4eagleexpress.com, owa.4eagleexpress.com CN=orders.4eagleexpress.com,OU=Domain Control Validated,C=US
10.0.0.252, mail.hosannalc.org, www.mail.hosannalc.org, xserver.hosannalc.org CN=mail.hosannalc.org,OU=Domain Control Validated,O=mail.hosannalc.org
10.0.0.90, opera.luxeopera.com, sunsetpms, sunsetpms.bel-air.ad OU=THIS CERTIFICATE ONLY VALID FOR INTERNAL USE,O=Micros,CN=SUNSETPMS
10.10.10.38, abc-srv02.abcad.local, autodiscover.abcrecycling.com, mail1.abcrecycling.com, owa.abcrecycling.com CN=mail1.abcrecycling.com,OU=Domain Control Validated,C=ca
10.10.20.11, autodiscover.vertica.dk, mail.vertica.dk, mail01, mail01.vertica.dk, owa.vertica.dk, vertica-mail01, vertica-mail01.vertica.dk, vertica.dk, www.vertica.dk CN=www.verti
@pzb
pzb / ipcerts-by-ca.txt
Created April 16, 2016 15:38
175 7 CN=DigiCert SHA2 Secure Server CA,O=DigiCert Inc,C=US
118 56 CN=GlobalSign Organization Validation CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE
101 76 CN=Cybertrust Japan Public CA G3,O=Cybertrust Japan Co.\, Ltd.,C=JP
47 2 CN=DigiCert SHA2 High Assurance Server CA,OU=www.digicert.com,O=DigiCert Inc,C=US
40 157 CN=GlobalSign Organization Validation CA - G2,O=GlobalSign nv-sa,C=BE
34 5 CN=DigiCert High Assurance CA-3,OU=www.digicert.com,O=DigiCert Inc,C=US
34 290 emailAddress=pki-security-ext@nestle.com,CN=Nestle External CA,OU=IS/IT,O=Nestle,L=Vevey,ST=Vaud,C=CH
27 243 CN=CA134100031,OU=GPKI,O=Government of Korea,C=KR
25 235 CN=DOD CA-28,OU=PKI,OU=DoD,O=U.S. Government,C=US
24 57 CN=Entrust Certification Authority - L1K,OU=(c) 2012 Entrust\, Inc. - for authorized use only,OU=See www.entrust.net/legal-terms,O=Entrust\, Inc.,C=US
@pzb
pzb / rsa-ecdsa-l3.txt
Created February 29, 2016 01:57
342
Eracom Technologies Group, Eracom Technologies Australia, Pty. Ltd.
www.eracom-tech.com
ProtectHost Orange Hardware Security Module and ProtectHost Orange Hardware Security Module with ORGA FM
www.eracom-tech.com/protecthost_orange
348
Francotyp-Postalia GmbH
www.fp.com
Postal Revenector
@pzb
pzb / annotate-issuers.rb
Created February 20, 2016 15:46
#!/usr/bin/ruby
require 'pp'
require 'csv'
COMODO_LIST_FILE = 'comodo-subordinates.txt'
ISSUER_COUNTS = 'issuer-types.txt'
known_cas = {}
issuers = []
@pzb
pzb / comodo-subordinates.txt
Created February 20, 2016 15:33
CN=TBS X509 CA persona,OU=TBS INTERNET CA,OU=Terms and Conditions: http://www.tbs-internet.com/CA/repository,O=TBS INTERNET,L=Caen,ST=Calvados,C=FR 2e5f871334b0c71d8c5dbe0eda411f671c6b7355fa3d7ebe5d307c6d918d587d
CN=GlobalTrust Certification Authority,O=GlobalTrust,C=IT e42a81b3718116c5a7e6b8d87e2f1b8a6a3bdfb1aec4ef1f1def24a9137b9dce
CN=TrustAsia DV SSL Server CA,O=TrustAsia Technologies\, Inc.,ST=Shanghai,C=CN 5cf6dde3d1e8dcdc0239e578db1df8b4b76a9a7d9d906107b54d44f9e8969e0e
CN=COMODO SHA-256 Extended Validation Secure Server CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB 38a3cf4c3954b397f0aee187bfabfd067b97f42a8cce8326f6f4d3aa0a27d0a1
CN=Network Solutions Certificate Authority,O=Network Solutions L.L.C.,C=US 32d180ed31c935589ec9dbbb722123b883b5fc2dc10f9fca3a95d77e1bfcb534
CN=InterContinental Hotels Group RSA Client CA,O=Six Continents Hotels\, Inc.,L=Dunwoody,ST=GA,C=US 41c4b37c665299648276de73bbcded2ea521a41275a919a11fb726b803b251f6
CN=TrustAsia OV SSL Server CA,O=TrustAsia Technologies\, Inc.,
@pzb
pzb / -
Created February 20, 2016 15:32
CN=InCommon Server CA,OU=InCommon,O=Internet2,C=US ff3aa5421942a1a3aa6ad339125409ad5cdba46df007251b7cd7503d20f6fd29
CN=InCommon IGTF Server CA,OU=InCommon,O=Internet2,C=US 78a2b9590de2636423c30f538ad6eef72944497b2d07bf344e74c9053edcd332
CN=InCommon ECC Server CA,OU=InCommon,O=Internet2,L=Ann Arbor,ST=MI,C=US f0f79dd7eff634fa9407643e509ae2f2804969a22b95db646f0f0b9a419392b1
CN=TERENA SSL CA 2,O=TERENA,L=Amsterdam,ST=Noord-Holland,C=NL 3d81c9ece93dcb63a8577c8c64501c1f8e4723ae32965fea713f644589901536
CN=TERENA Code Signing CA 2,O=TERENA,L=Amsterdam,ST=Noord-Holland,C=NL 1bb2bd10669fe51ec0ada2f75ec6528cf1fa5efcd04dbabde6c930a7bd069f1e
CN=TERENA eScience SSL CA 2,O=TERENA,L=Amsterdam,ST=Noord-Holland,C=NL a1cec020ac21ee2d592234545dd001429d480f132d0d98a5e6638d8ee5a136bc
CN=TERENA Personal CA 2,O=TERENA,L=Amsterdam,ST=Noord-Holland,C=NL 958ba6738055c578885c3b0b866fbb467785e0adfe3aad18eed5b3139de3a5d6
CN=TERENA eScience Personal CA 2,O=TERENA,L=Amsterdam,ST=Noord-Holland,C=NL 3d10dfc74d43dad18c8477c03917b393a47146eccb