franccesco / getaltname

Extract subdomains from SSL certificates in HTTPS sites.
https://franccesco.github.io/getaltname/
MIT License
364 stars 74 forks source link

Incorrect list of SANs for biznessapps.com #4

Closed articice closed 6 years ago

articice commented 6 years ago

gsan biznessapps.com

returns

→ adn.wiredrive.com → ak-site-origin-cover.cduniverse.com → assets.pokemon.com → belleandclive.com → biznessapps.com → bluefly.com → cdn.citadoncw.com → cdn.shocho.co → cdn2.mediasilo.com → cdn2.navexglobal.com → cduniverse.com → chdist.com → connections.cochlear.com → cover.cduniverse.com → edgecast.com → g.cduniverse.com → gp1.adn.edgecastcdn.net → gs1.adn.edgecastcdn.net → is.belleandclive.com → marketing-admin.upsight-api.com → ne1.adn.edgecastcdn.net → renttherunway.com → secure.hibustudio.com → shopperschoice.com → speedtest.net → stardoll.com → thefanorama.com → uship.com → woodcraft.com

I believe this is an error.

franccesco commented 6 years ago

Thank you for bringing this issue to my attention, but what happens is that the alternative names in certificate are not properly configured in this web page, this is why it throws a lot of subdomains that doesn't belong to the domain. This is also why it is not trusted when you first enter this site.

You can see the report here: https://www.ssllabs.com/ssltest/analyze.html?d=biznessapps.com

If you have another question, please don't hesitate to comment more about this issue :)

articice commented 6 years ago

@franccesco right, these are domains from CDN provider, my bad.