Eli onko syytä olla huolissaan tällaisesta Operan antamasta ilmoituksesta
http://i3.tinypic.com/wk4px0.png
vai voinko tehdä turvallisesti luottokortilla tilauksen kyseiseltä saitilta (Makezine) vai onko mahdollisista hakkereista normaalia suurempaa pelkoa. Joskus aiemmin tuli vastaavantyyppinen ilmoitus Cd-Wow:in tai play.comin sivustolle mennessäni. Otin silloin maililla yhteyttä ko. firmaan, mutta vastauksesta päättelin, etteivät lainkaan ymmärtäneet mistä on kysymys, enkä jaksanut enää kirjeenvaihtoa jatkaa..
tällaiset tiedot noista sertifikaateista antaa Opera kun tuosta ilmo-ikkunasta valitsin katso tarkemmat tiedot -kohdan
(ylempi)
Certificate name
readerservices.makezine.com
O'Reilly Media Inc.
Conferences Group, EliteSSL
Sebastopol
California, US
postalCode: 95472
streetAddress: 1005 Gravenstein hwy north
Issuer
AddTrust External CA Root
AddTrust AB
AddTrust External TTP Network
SE
Details
https://readerservices.makezine.com/mk/SubFAQ.aspx?PC=MK&AN=&Zp=&PK=
Connection : TLS v1.0 128 bit ARC4 (RSA/MD5)
Certificate version: 3
Serial number: 0x993BAEF9B6F33D8B5D931887603EC7DD
Not valid before: Oct 22 00:00:00 2005 GMT
Not valid after: Oct 22 23:59:59 2007 GMT
Fingerprint : (MD5) DF F9 1E 2E 66 DB 3B 70 3B 29 7B C7 33 B9 5B E0
Fingerprint : (SHA-1) 91 AC 27 D6 E9 A2 02 72 1F 74 55 BA D3 79 28 3B DA 82 27 6A
Public key algorithm : rsaEncryption
Public-Key (512 bit):
Modulus:
00: D7 AF 88 26 1B F2 ED 88 C1 97 F9 E7 F1 F8 B4 D9
10: 42 5D 86 84 E5 BE 4B 86 24 39 09 0A 53 68 05 EE
20: 1D 14 45 44 43 88 BE E2 41 71 0A 51 47 8B 02 FF
30: D2 19 D4 9E CB 0F 73 31 85 5F B4 AB BA 9A 7E E9
Exponent:
01 00 01
Signature algorithm : sha1WithRSAEncryption
0000: 2F AE 58 1E C5 53 D4 2A CE 52 46 32 91 05 F7 AB
0010: E7 E2 96 C6 F7 30 41 82 39 24 06 BD 6E F2 36 32
0020: 02 5E 45 F1 85 64 5D 40 0A BF 05 C3 F0 20 71 B2
0030: 96 F5 AC 1B 5A D1 57 B7 A6 4C 02 AC B8 3A 75 8E
0040: BF 52 85 09 8B C1 3E 8C 19 AF 73 17 53 F9 D2 D8
0050: 4E F0 9D AC 5E 98 64 8C 86 C8 7D AE E6 80 9B 49
0060: 6E 7D 08 13 B1 6C 50 76 1C 49 34 CC 72 B2 EC 03
0070: 95 F0 9A BF 99 F4 B8 53 58 EA 74 40 6D D8 0C A0
0080: F1 7A 8B 7D 3F 12 9A 4B 0C CD 66 6B 96 9B B4 F7
0090: CC 35 40 43 86 FF 3A 6E 52 66 09 E6 44 7E AD F2
00A0: 01 82 21 3B 49 B0 13 4B 23 A6 14 71 5A 76 FF 2F
00B0: 55 A0 47 36 B4 0E A0 D0 B7 FA 5D F9 C9 E2 7B 4F
00C0: C1 5B 7F 04 EC B4 1A 97 AE D6 F2 36 E2 FF A3 DE
00D0: 6E 14 D4 A2 C9 C7 0B 7F 61 86 6D 6C F5 93 4E 95
00E0: 20 C1 B9 03 4C 54 76 1A 20 37 A2 2B 61 AD 38 71
00F0: 34 9A 18 47 E0 4B 06 94 31 00 24 34 DE 30 73 32
Extensions:
X509v3 Subject Key Identifier: F2:74:3D:7C:88:99:BE:2E:76:FB:96:92:02:D3:23:47:5E:87:03:0D
X509v3 Key Usage (Critical): Digital Signature, Key Encipherment
X509v3 Basic Constraints (Critical): CA:FALSE
X509v3 Extended Key Usage: TLS Web Server Authentication, TLS Web Client Authentication
Netscape Cert Type: SSL Client, SSL Server
X509v3 Certificate Policies:
Policy: 1.3.6.1.4.1.6449.1.2.1.3.4
CPS: https://secure.comodo.net/CPS
X509v3 CRL Distribution Points:
URI:http://crl.comodoca.com/AddTrustExternalCARoot.crl
URI:http://crl.comodo.net/AddTrustExternalCARoot.crl
Authority Information Access:
CA Issuers - URI:http://crt.comodoca.com/AddTrustUTNServerCA.crt
CA Issuers - URI:http://crt.comodo.net/AddTrustUTNServerCA.crt
tuo toinen sertifikaatti (alempi), josta Opera herjaa:
Certificate name
AddTrust External CA Root
AddTrust AB
AddTrust External TTP Network
SE
Issuer
UTN-USERFirst-Hardware
The USERTRUST Network
http://www.usertrust.com
Salt Lake City
UT, US
Details
https://readerservices.makezine.com/mk/SubFAQ.aspx?PC=MK&AN=&Zp=&PK=
Connection : TLS v1.0 128 bit ARC4 (RSA/MD5)
Certificate version: 3
Serial number: 0x1CCE446295197A9D6352F9F223A9B698
Not valid before: Jun 7 08:09:10 2005 GMT
Not valid after: Jul 9 18:19:22 2019 GMT
Fingerprint : (MD5) 9A 34 A0 CB C0 51 C9 52 39 12 60 A5 3F CD FE B7
Fingerprint : (SHA-1) 5C 95 5B F2 A3 0B FD 73 59 DE 77 2A 2A 4E 35 98 C6 CE 0D 0C
Public key algorithm : rsaEncryption
Public-Key (2048 bit):
Modulus:
0000: 27 5A 34 D5 53 5D E9 EF FB 7B B8 B2 15 6F 42 D3
0010: B6 65 2B 0A B7 46 D7 29 CD F5 59 75 56 8F 33 A7
0020: B7 11 23 58 6A 69 B9 61 FA 25 00 43 DD 2B C9 B7
0030: 44 13 CD AC EE C4 D6 B4 B7 7D 2A 5D C4 45 A8 14
0040: DB 72 38 D0 DA 72 92 C2 0D 2F 00 F7 37 94 A0 59
0050: A4 65 79 B3 37 08 71 5A 72 5F 41 6D EE AD C7 E4
0060: 44 6B D7 42 D7 BB 6F 69 E1 9F CE DF D8 84 4F 3A
0070: AB 23 4F B0 4C AB 90 18 26 69 A8 E9 A8 02 86 07
0080: 38 9D 13 C7 0A 60 50 B3 71 9C 94 71 A6 B3 05 AF
0090: 4E 9A D7 DC 50 6A A1 87 9E 8F 14 5E AA 61 AC 0E
00A0: 3C 40 9A 9D 78 0F 5F C6 E9 54 90 C8 CA 74 9E 32
00B0: E8 3F 4F F0 C7 56 70 AD 41 91 3E 1E 2D 38 37 BF
00C0: CA B8 FD 95 2E DB 7A 49 B0 80 5A 94 29 97 D6 5A
00D0: 50 6D E5 CF 8F E3 1A 03 ED 93 BC 4A BD 9F 93 7D
00E0: 4C 29 A4 97 33 11 9B DE CE B6 23 FA B5 CD 0F 6C
00F0: BC 1F ED 5B 4E E0 39 2D 04 00 F2 E6 33 1A F7 B7
Exponent:
01 00 01
Signature algorithm : sha1WithRSAEncryption
0000: 72 42 10 0D 3A CE 24 0A 5A F0 17 C0 56 A2 7B D4
0010: 38 60 92 8D 12 B9 DB 36 19 80 35 D8 36 30 ED 9A
0020: BE 6B 27 A3 72 3C 50 CD 9F E2 71 90 BA 63 61 EB
0030: 48 14 C4 DB 49 17 BA EF D0 6D F2 6E DA 80 80 28
0040: 41 81 50 B7 13 2E C8 B9 C9 7A 00 76 68 46 D0 88
0050: 8C 61 FE D0 B6 D5 47 05 17 B9 2D 76 70 E8 4E 50
0060: 3A C3 7A 4B BA FB A7 68 8F 38 39 FD E8 D9 80 6B
0070: 87 39 13 6C 27 DA 62 4E 49 46 54 E9 B9 D5 BD 0E
0080: 45 24 1C 1B 32 C7 79 E4 9C F2 A7 A6 59 08 19 A2
0090: B4 8E 09 FC 13 49 FE 48 56 9B 61 A1 E4 23 D2 EB
00A0: A1 84 FF F8 9B 4B 79 F8 7D 96 00 5D 02 05 6F D1
00B0: 43 DB CE 81 9F B8 3B 2B 93 F6 61 F9 4A E0 6C B1
00C0: 69 1E 85 67 12 58 73 6E 48 7A E1 9D 17 38 66 89
00D0: BA 74 1C EB C7 02 66 EE 47 4E 7F DA 2B B7 C1 18
00E0: C7 15 7E 54 42 5C B5 44 42 95 3D 3C 80 1D 18 0F
00F0: 18 9E F8 3A F3 8B 7C 18 C6 8A B1 19 75 8C 81 99
Extensions:
X509v3 Authority Key Identifier:
keyid:A1:72:5F:26:1B:28:98:43:95:5D:07:37:D5:85:96:9D:4B:D2:C3:45
X509v3 Subject Key Identifier: AD:BD:98:7A:34:B4:26:F7:FA:C4:26:54:EF:03:BD:E0:24:CB:54:1A
X509v3 Key Usage (Critical): Certificate Sign, CRL Sign
X509v3 Basic Constraints (Critical): CA:TRUE
Netscape Cert Type: S/MIME CA
X509v3 CRL Distribution Points:
URI:http://crl.usertrust.com/UTN-USERFirst-Hardware.crl
http://i3.tinypic.com/wk4px0.png
vai voinko tehdä turvallisesti luottokortilla tilauksen kyseiseltä saitilta (Makezine) vai onko mahdollisista hakkereista normaalia suurempaa pelkoa. Joskus aiemmin tuli vastaavantyyppinen ilmoitus Cd-Wow:in tai play.comin sivustolle mennessäni. Otin silloin maililla yhteyttä ko. firmaan, mutta vastauksesta päättelin, etteivät lainkaan ymmärtäneet mistä on kysymys, enkä jaksanut enää kirjeenvaihtoa jatkaa..
tällaiset tiedot noista sertifikaateista antaa Opera kun tuosta ilmo-ikkunasta valitsin katso tarkemmat tiedot -kohdan
(ylempi)
Certificate name
readerservices.makezine.com
O'Reilly Media Inc.
Conferences Group, EliteSSL
Sebastopol
California, US
postalCode: 95472
streetAddress: 1005 Gravenstein hwy north
Issuer
AddTrust External CA Root
AddTrust AB
AddTrust External TTP Network
SE
Details
https://readerservices.makezine.com/mk/SubFAQ.aspx?PC=MK&AN=&Zp=&PK=
Connection : TLS v1.0 128 bit ARC4 (RSA/MD5)
Certificate version: 3
Serial number: 0x993BAEF9B6F33D8B5D931887603EC7DD
Not valid before: Oct 22 00:00:00 2005 GMT
Not valid after: Oct 22 23:59:59 2007 GMT
Fingerprint : (MD5) DF F9 1E 2E 66 DB 3B 70 3B 29 7B C7 33 B9 5B E0
Fingerprint : (SHA-1) 91 AC 27 D6 E9 A2 02 72 1F 74 55 BA D3 79 28 3B DA 82 27 6A
Public key algorithm : rsaEncryption
Public-Key (512 bit):
Modulus:
00: D7 AF 88 26 1B F2 ED 88 C1 97 F9 E7 F1 F8 B4 D9
10: 42 5D 86 84 E5 BE 4B 86 24 39 09 0A 53 68 05 EE
20: 1D 14 45 44 43 88 BE E2 41 71 0A 51 47 8B 02 FF
30: D2 19 D4 9E CB 0F 73 31 85 5F B4 AB BA 9A 7E E9
Exponent:
01 00 01
Signature algorithm : sha1WithRSAEncryption
0000: 2F AE 58 1E C5 53 D4 2A CE 52 46 32 91 05 F7 AB
0010: E7 E2 96 C6 F7 30 41 82 39 24 06 BD 6E F2 36 32
0020: 02 5E 45 F1 85 64 5D 40 0A BF 05 C3 F0 20 71 B2
0030: 96 F5 AC 1B 5A D1 57 B7 A6 4C 02 AC B8 3A 75 8E
0040: BF 52 85 09 8B C1 3E 8C 19 AF 73 17 53 F9 D2 D8
0050: 4E F0 9D AC 5E 98 64 8C 86 C8 7D AE E6 80 9B 49
0060: 6E 7D 08 13 B1 6C 50 76 1C 49 34 CC 72 B2 EC 03
0070: 95 F0 9A BF 99 F4 B8 53 58 EA 74 40 6D D8 0C A0
0080: F1 7A 8B 7D 3F 12 9A 4B 0C CD 66 6B 96 9B B4 F7
0090: CC 35 40 43 86 FF 3A 6E 52 66 09 E6 44 7E AD F2
00A0: 01 82 21 3B 49 B0 13 4B 23 A6 14 71 5A 76 FF 2F
00B0: 55 A0 47 36 B4 0E A0 D0 B7 FA 5D F9 C9 E2 7B 4F
00C0: C1 5B 7F 04 EC B4 1A 97 AE D6 F2 36 E2 FF A3 DE
00D0: 6E 14 D4 A2 C9 C7 0B 7F 61 86 6D 6C F5 93 4E 95
00E0: 20 C1 B9 03 4C 54 76 1A 20 37 A2 2B 61 AD 38 71
00F0: 34 9A 18 47 E0 4B 06 94 31 00 24 34 DE 30 73 32
Extensions:
X509v3 Subject Key Identifier: F2:74:3D:7C:88:99:BE:2E:76:FB:96:92:02:D3:23:47:5E:87:03:0D
X509v3 Key Usage (Critical): Digital Signature, Key Encipherment
X509v3 Basic Constraints (Critical): CA:FALSE
X509v3 Extended Key Usage: TLS Web Server Authentication, TLS Web Client Authentication
Netscape Cert Type: SSL Client, SSL Server
X509v3 Certificate Policies:
Policy: 1.3.6.1.4.1.6449.1.2.1.3.4
CPS: https://secure.comodo.net/CPS
X509v3 CRL Distribution Points:
URI:http://crl.comodoca.com/AddTrustExternalCARoot.crl
URI:http://crl.comodo.net/AddTrustExternalCARoot.crl
Authority Information Access:
CA Issuers - URI:http://crt.comodoca.com/AddTrustUTNServerCA.crt
CA Issuers - URI:http://crt.comodo.net/AddTrustUTNServerCA.crt
tuo toinen sertifikaatti (alempi), josta Opera herjaa:
Certificate name
AddTrust External CA Root
AddTrust AB
AddTrust External TTP Network
SE
Issuer
UTN-USERFirst-Hardware
The USERTRUST Network
http://www.usertrust.com
Salt Lake City
UT, US
Details
https://readerservices.makezine.com/mk/SubFAQ.aspx?PC=MK&AN=&Zp=&PK=
Connection : TLS v1.0 128 bit ARC4 (RSA/MD5)
Certificate version: 3
Serial number: 0x1CCE446295197A9D6352F9F223A9B698
Not valid before: Jun 7 08:09:10 2005 GMT
Not valid after: Jul 9 18:19:22 2019 GMT
Fingerprint : (MD5) 9A 34 A0 CB C0 51 C9 52 39 12 60 A5 3F CD FE B7
Fingerprint : (SHA-1) 5C 95 5B F2 A3 0B FD 73 59 DE 77 2A 2A 4E 35 98 C6 CE 0D 0C
Public key algorithm : rsaEncryption
Public-Key (2048 bit):
Modulus:
0000: 27 5A 34 D5 53 5D E9 EF FB 7B B8 B2 15 6F 42 D3
0010: B6 65 2B 0A B7 46 D7 29 CD F5 59 75 56 8F 33 A7
0020: B7 11 23 58 6A 69 B9 61 FA 25 00 43 DD 2B C9 B7
0030: 44 13 CD AC EE C4 D6 B4 B7 7D 2A 5D C4 45 A8 14
0040: DB 72 38 D0 DA 72 92 C2 0D 2F 00 F7 37 94 A0 59
0050: A4 65 79 B3 37 08 71 5A 72 5F 41 6D EE AD C7 E4
0060: 44 6B D7 42 D7 BB 6F 69 E1 9F CE DF D8 84 4F 3A
0070: AB 23 4F B0 4C AB 90 18 26 69 A8 E9 A8 02 86 07
0080: 38 9D 13 C7 0A 60 50 B3 71 9C 94 71 A6 B3 05 AF
0090: 4E 9A D7 DC 50 6A A1 87 9E 8F 14 5E AA 61 AC 0E
00A0: 3C 40 9A 9D 78 0F 5F C6 E9 54 90 C8 CA 74 9E 32
00B0: E8 3F 4F F0 C7 56 70 AD 41 91 3E 1E 2D 38 37 BF
00C0: CA B8 FD 95 2E DB 7A 49 B0 80 5A 94 29 97 D6 5A
00D0: 50 6D E5 CF 8F E3 1A 03 ED 93 BC 4A BD 9F 93 7D
00E0: 4C 29 A4 97 33 11 9B DE CE B6 23 FA B5 CD 0F 6C
00F0: BC 1F ED 5B 4E E0 39 2D 04 00 F2 E6 33 1A F7 B7
Exponent:
01 00 01
Signature algorithm : sha1WithRSAEncryption
0000: 72 42 10 0D 3A CE 24 0A 5A F0 17 C0 56 A2 7B D4
0010: 38 60 92 8D 12 B9 DB 36 19 80 35 D8 36 30 ED 9A
0020: BE 6B 27 A3 72 3C 50 CD 9F E2 71 90 BA 63 61 EB
0030: 48 14 C4 DB 49 17 BA EF D0 6D F2 6E DA 80 80 28
0040: 41 81 50 B7 13 2E C8 B9 C9 7A 00 76 68 46 D0 88
0050: 8C 61 FE D0 B6 D5 47 05 17 B9 2D 76 70 E8 4E 50
0060: 3A C3 7A 4B BA FB A7 68 8F 38 39 FD E8 D9 80 6B
0070: 87 39 13 6C 27 DA 62 4E 49 46 54 E9 B9 D5 BD 0E
0080: 45 24 1C 1B 32 C7 79 E4 9C F2 A7 A6 59 08 19 A2
0090: B4 8E 09 FC 13 49 FE 48 56 9B 61 A1 E4 23 D2 EB
00A0: A1 84 FF F8 9B 4B 79 F8 7D 96 00 5D 02 05 6F D1
00B0: 43 DB CE 81 9F B8 3B 2B 93 F6 61 F9 4A E0 6C B1
00C0: 69 1E 85 67 12 58 73 6E 48 7A E1 9D 17 38 66 89
00D0: BA 74 1C EB C7 02 66 EE 47 4E 7F DA 2B B7 C1 18
00E0: C7 15 7E 54 42 5C B5 44 42 95 3D 3C 80 1D 18 0F
00F0: 18 9E F8 3A F3 8B 7C 18 C6 8A B1 19 75 8C 81 99
Extensions:
X509v3 Authority Key Identifier:
keyid:A1:72:5F:26:1B:28:98:43:95:5D:07:37:D5:85:96:9D:4B:D2:C3:45
X509v3 Subject Key Identifier: AD:BD:98:7A:34:B4:26:F7:FA:C4:26:54:EF:03:BD:E0:24:CB:54:1A
X509v3 Key Usage (Critical): Certificate Sign, CRL Sign
X509v3 Basic Constraints (Critical): CA:TRUE
Netscape Cert Type: S/MIME CA
X509v3 CRL Distribution Points:
URI:http://crl.usertrust.com/UTN-USERFirst-Hardware.crl
Vastaukset 2
Vanhimmat
Ei kai se turhaan varoittele.
Jos sattuisi saamaan kommenttia.
Tällainen oli muuten se aiemmin saamani varoitus CD-Wowin tilauksen yhteydessä (joulun alla). Tämä ilmoitus tuli vasta, kun painoin sitä nappia "tilaa" ja tilaus oli siis jo tehty.
http://i3.tinypic.com/wmazj7.png
..ja tällainen oli kirjeenvaihto yhtiön asiakaspalvelun kanssa (juu juu tiekkarin kellohan se muka ei ole synkassa):
Hi mummmu
Thanks for your message.
I can confirm that the details entered on your order are totally secure.
This can be verified by viewing the padlock in the bottom right hand corner,
and the website address will also read as
'https://' near the top of your screen.
The certificate warning which has appeared whilst placing the order is
simply referring to the mismatch of dates between our secure server, and
your computer. It is worth checking that the date on your computer is set
correctly. If you are using Windows, then this can we easily done by
double-clicking on the clock in the bottom right hand corner of the screen
and altering the date if necessary.
It is perfectly safe to click on 'Yes' within the pop up box shown and
proceed with the order.
Apologies for any inconvenience and if after this you still experience
problems, please do get back to us so that we are able to assist you
further.
Kind Regards
Michelle
www.cd-wow.com
www.wowwoman.com
-----Original Message-----
From: [email protected] [mailto:[email protected]]
Sent: 12 December 2005 04:07
To: [email protected]
Subject: Customer mail - RE.C/S General
The following customer mail was received:
Name: mummmu old
Email: [email protected]
User Number:
Site: www9.cd-wow.com
Body of message follows:
Name: mummmu oldEmail Address: [email protected]
Comments: Hi! After making my order (during payment process) my Opera 8
-browser pop-upped an warning that stated that
this certificate (which is used during payment process):
scripts.affiliatefuture.com
Internet Business Group PLC
Affiliatefuture.com
is not considered secure anymore (it is outdated and considered as an
possible security-risk). So why do You use an certificate that might put
Your customers´ transactions in high danger?
Best regards