Skip to content

Instantly share code, notes, and snippets.

@xiaohuilam
Last active April 4, 2021 17:40
Show Gist options
  • Star 4 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save xiaohuilam/8589f2dfaac435bae4bf8dfe0984f69e to your computer and use it in GitHub Desktop.
Save xiaohuilam/8589f2dfaac435bae4bf8dfe0984f69e to your computer and use it in GitHub Desktop.
alicdn.com Fake Certificate signed by WoSign
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
CN=www.alicdn.com
COUNTRY=CN
NOT_BEFORE=2016-06-23 9:11:32 GMT+8:00
NOT_AFTER=2018-6-23 9:11:32 GMT+8:00
SAN1=www.alicdn.com
SAN2=alicdn.com
SAN3=img.alicdn.com
SAN4=g.alicdn.com
SAN5=assets.alicdn.com
SAN6=af.alicdn.com
ISSUER
CN=WoSign CA Free SSL Certificate G2
O=WoSign CA Limited
COUNTRY=CN
@fjctlzy
Copy link

fjctlzy commented Aug 31, 2016

You generate this certificate 's private key? or the private is compromised ?

@xiaohuilam
Copy link
Author

@fjctlzy
I kept private key safe and secretly.
I will not do anything to harm my country's largest shopping site.

@gerv
Copy link

gerv commented Sep 5, 2016

@xiaohuilam Please can you contact me by private email - gerv at mozilla dot org? Mozilla is investigating possible issues with WoSign and I would like to understand how you managed to obtain this certificate.

Thanks.

@barretlee
Copy link

Would you mind removing these information, and just save the cert file in your local device?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment