3 ms·

https://one.one.one.one https://one.one.one.one https://1.1.1.1 https://1.1.1.1

• mmastrac 8y ago
  Are there any other legitimate certs issued with IP address altnames?
  • lelf 8y ago
    dns.google 8888.google 8.8.8.8 8.8.4.4
    • mmastrac 8y ago
      Oddly https://8.8.8.8 https://8.8.8.8 doesn't have a legit cert though (even though the cert for 8888.google does have an IP address alt)
      • lelf 8y ago
        It does I think - Certificate[1] info: - subject `CN=Google Internet Authority G3,O=Google Trust Services,C=US', issuer `CN=GlobalSign,O=GlobalSign,OU=GlobalSign Root CA - R2', serial 0x01e3a9301cfc7206383f9a531d, RSA key 2048 bits, signed using RSA-SHA256, activated `2017-06-15 00:00:42 UTC', expires `2021-12-15 00:00:42 UTC', pin-sha256="f8NnEFZxQ4ExFOhSN7EiFWtiudZQVD2oY60uauV/n78=" - Status: The certificate is trusted.
        • maltalex 8y ago
          > Firefox does not trust this site because it uses a certificate that is not valid for 8.8.8.8. The certificate is only valid for the following names: .c.docs.google.com, .a1.googlevideo.com, .c.2mdn.net, .c.audiobooks.play.google.com, .c.bigcache.googleapis.com, .c.chat.google.com, .c.doc-0-0-sj.sj.googleusercontent.com, .c.drive.google.com, .c.googlesyndication.com, .c.googlevideo.com, .c.inbox.google.com, .c.lh3-da.googleusercontent.com, .c.lh3-da.photos0.sandbox.google.com, .c.lh3-db.googleusercontent.com, .c.lh3-db.photos1.sandbox.google.com, .c.lh3-dc.googleusercontent.com, .c.lh3-dc.photos2.sandbox.google.com, .c.lh3-dd.googleusercontent.com, .c.lh3-dd.photos3.sandbox.google.com, .c.lh3-de.googleusercontent.com, .c.lh3-de.photos4.sandbox.google.com, .c.lh3-df.googleusercontent.com, .c.lh3-df.photos5.sandbox.google.com, .c.lh3-dg.googleusercontent.com, .c.lh3-dg.photos6.sandbox.google.com, .c.lh3-dz.googleusercontent.com, .c.lh3-dz.photos-autopush.sandbox.google.com, .c.lh3.googleusercontent.com, .c.lh3.photos.google.com, .c.mail.google.com, .c.offline.maps.google.com, .c.pack.google.com, .c.play.google.com, .c.video.google.com, .c.youtube.com, .cache1.c.docs.google.com, .cache1.c.play.google.com, .cache1.c.video.google.com, .cache1.c.youtube.com, .cache2.c.docs.google.com, .cache2.c.play.google.com, .cache2.c.video.google.com, .cache2.c.youtube.com, .cache3.c.docs.google.com, .cache3.c.play.google.com, .cache3.c.video.google.com, .cache3.c.youtube.com, .cache4.c.docs.google.com, .cache4.c.play.google.com, .cache4.c.video.google.com, .cache4.c.youtube.com, .cache5.c.docs.google.com, .cache5.c.play.google.com, .cache5.c.video.google.com, .cache5.c.youtube.com, .cache6.c.docs.google.com, .cache6.c.play.google.com, .cache6.c.video.google.com, .cache6.c.youtube.com, .cache7.c.docs.google.com, .cache7.c.play.google.com, .cache7.c.video.google.com, .cache7.c.youtube.com, .cache8.c.docs.google.com, .cache8.c.play.google.com, .cache8.c.video.google.com, .cache8.c.youtube.com, .dai.googlevideo.com, .googlevideo.com, .googlezip.net, .gvt1.com, .offline-maps.gvt1.com, .snap.gvt1.com, .xn--ngstr-lra8j.com, xn--ngstr-lra8j.com
          • mmastrac 8y ago
            Thanks! That's what I meant - 8.8.8.8 has a real cert, just not a valid one for its IP address (which does appear on other domains, oddly enough).