4 ms·

Can anyone else confirm this?

maaarghk 11y ago
well, running the command gives this: Microsoft Windows [Version 10.0.10240] (c) 2015 Microsoft Corporation. All rights reserved. C:\WINDOWS\system32>certutil -verifyCTL disallowed LastSyncTime = "22/09/2015 13:53" [DisallowedCTL] ListIdentifier = "DisallowedCert_AutoUpdate_1" SequenceNumber = 01d065c00c3f1258 ThisUpdate = "24/03/2015 00:21" NextUpdate = EMPTY SubjectAlgorithm = 1.3.6.1.4.1.311.10.11.15, "disallowedHash" SignerExpiration = "23/09/2015 21:36", "1.0 Days" WARNING = "SignerExpiration: Less than 180 Days" CTLEntries = 57 The system cannot find the file specified. 0x80070002 (WIN32: 2 ERROR_FILE_NOT_FOUND) -- http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/disallowedcert.sst MissingCerts = 57 but I know nothing about the implications. It also looks like the file has the possibility to be downloaded from msft on the fly?
AaronFriel 11y ago
I have no idea of potential impact, but the command run on an up-to-date Windows 10 system reports: > certutil -verifyCTL disallowed LastSyncTime = "9/22/2015 9:33 AM" [DisallowedCTL] ListIdentifier = "DisallowedCert_AutoUpdate_1" SequenceNumber = 01d065c00c3f1258 ThisUpdate = "3/23/2015 6:21 PM" NextUpdate = EMPTY SubjectAlgorithm = 1.3.6.1.4.1.311.10.11.15, "disallowedHash" SignerExpiration = "9/23/2015 3:36 PM", "1.0 Days" WARNING = "SignerExpiration: Less than 180 Days" CTLEntries = 57 The system cannot find the file specified. 0x80070002 (WIN32: 2 ERROR_FILE_NOT_FOUND) -- http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/disallowedcert.sst MissingCerts = 57
- deleted 11y ago
  [deleted]
- shlorn 11y ago
  Can confirm, getting similar output on Windows 10.0.10240. Although url is working works in chrome. Could this be a bug in the certutil updater?
orf 11y ago
(endpoint) C:\Users\orf λ certutil -verifyCTL disallowed | head LastSyncTime = "22/09/2015 18:24" [DisallowedCTL] ListIdentifier = "DisallowedCert_AutoUpdate_1" SequenceNumber = 01d065c00c3f1258 ThisUpdate = "24/03/2015 00:21" NextUpdate = EMPTY SubjectAlgorithm = 1.3.6.1.4.1.311.10.11.15, "disallowedHash" SignerExpiration = "23/09/2015 21:36", "1.0 Days" WARNING = "SignerExpiration: Less than 180 Days" CTLEntries = 57 Then a whole load of entries like: [f69d22ae1ed615b1b9e390e310bbbb31] CertId = 1.3.6.1.4.1.311.10.11.0 Subject = "MISSING_CERTIFICATE"
GaryGapinski 11y ago
As of a short while ago (times are US/Eastern): C:\Users\gapinski>certutil -verifyCTL disallowed|more LastSyncTime = "9/23/2015 3:33 AM" [DisallowedCTL] ListIdentifier = "DisallowedCert_AutoUpdate_1" SequenceNumber = 01d0f584a9ad12f7 ThisUpdate = "9/22/2015 6:18 PM" NextUpdate = EMPTY SubjectAlgorithm = 1.3.6.1.4.1.311.10.11.15, "disallowedHash" SignerExpiration = "8/14/2016 1:13 PM", "326.4 Days" CTLEntries = 57 …

well, running the command gives this: Microsoft Windows [Version 10.0.10240] (c) 2015 Microsoft Corporation. All rights reserved. C:\WINDOWS\system32>certutil -verifyCTL disallowed LastSyncTime = "22/09/2015 13:53" [DisallowedCTL] ListIdentifier = "DisallowedCert_AutoUpdate_1" SequenceNumber = 01d065c00c3f1258 ThisUpdate = "24/03/2015 00:21" NextUpdate = EMPTY SubjectAlgorithm = 1.3.6.1.4.1.311.10.11.15, "disallowedHash" SignerExpiration = "23/09/2015 21:36", "1.0 Days" WARNING = "SignerExpiration: Less than 180 Days" CTLEntries = 57 The system cannot find the file specified. 0x80070002 (WIN32: 2 ERROR_FILE_NOT_FOUND) -- http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/disallowedcert.sst MissingCerts = 57 but I know nothing about the implications. It also looks like the file has the possibility to be downloaded from msft on the fly?

AaronFriel 11y ago

I have no idea of potential impact, but the command run on an up-to-date Windows 10 system reports: > certutil -verifyCTL disallowed LastSyncTime = "9/22/2015 9:33 AM" [DisallowedCTL] ListIdentifier = "DisallowedCert_AutoUpdate_1" SequenceNumber = 01d065c00c3f1258 ThisUpdate = "3/23/2015 6:21 PM" NextUpdate = EMPTY SubjectAlgorithm = 1.3.6.1.4.1.311.10.11.15, "disallowedHash" SignerExpiration = "9/23/2015 3:36 PM", "1.0 Days" WARNING = "SignerExpiration: Less than 180 Days" CTLEntries = 57 The system cannot find the file specified. 0x80070002 (WIN32: 2 ERROR_FILE_NOT_FOUND) -- http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/disallowedcert.sst MissingCerts = 57

deleted 11y ago
[deleted]
shlorn 11y ago
Can confirm, getting similar output on Windows 10.0.10240. Although url is working works in chrome. Could this be a bug in the certutil updater?

orf 11y ago

(endpoint) C:\Users\orf λ certutil -verifyCTL disallowed | head LastSyncTime = "22/09/2015 18:24" [DisallowedCTL] ListIdentifier = "DisallowedCert_AutoUpdate_1" SequenceNumber = 01d065c00c3f1258 ThisUpdate = "24/03/2015 00:21" NextUpdate = EMPTY SubjectAlgorithm = 1.3.6.1.4.1.311.10.11.15, "disallowedHash" SignerExpiration = "23/09/2015 21:36", "1.0 Days" WARNING = "SignerExpiration: Less than 180 Days" CTLEntries = 57 Then a whole load of entries like: [f69d22ae1ed615b1b9e390e310bbbb31] CertId = 1.3.6.1.4.1.311.10.11.0 Subject = "MISSING_CERTIFICATE"

GaryGapinski 11y ago

As of a short while ago (times are US/Eastern): C:\Users\gapinski>certutil -verifyCTL disallowed|more LastSyncTime = "9/23/2015 3:33 AM" [DisallowedCTL] ListIdentifier = "DisallowedCert_AutoUpdate_1" SequenceNumber = 01d0f584a9ad12f7 ThisUpdate = "9/22/2015 6:18 PM" NextUpdate = EMPTY SubjectAlgorithm = 1.3.6.1.4.1.311.10.11.15, "disallowedHash" SignerExpiration = "8/14/2016 1:13 PM", "326.4 Days" CTLEntries = 57 …