koenrh / russian-trusted-root-ca

8 stars 1 forks source link

Certs compard to the rest of web PKI #2

Open pgporada opened 2 years ago

pgporada commented 2 years ago

Here's a small snippet anyone can run to see how misissued these certificates are compared to the rest of the web PKI.

$ go get github.com/zmap/zlint/v3/cmd/zlint
$ cd russian-trusted-root-ca/certificates
$ for i in *.pem; do echo "==========${i}=========="; zlint --pretty ${i}  | egrep -C1 "result\": \"(error|info)\""; echo; done