プロジェクト

全般

プロフィール

編集 履歴

Wiki » Impression »

身の回りのドメインのSSL証明書 » 履歴 » バージョン 2

sylow castle, 2018/08/26 16:34

1 1 sylow castle 
# 身の回りのドメインのSSL証明書
2 





    3
    
    
    
## 概要





    4
    
    
    





    5
    
    
    
仕事でSSL証明書どこから買おうか悩んでいたのでちょっと他のWebサービスなどを調査してみる。





    6
    
    
    
ブラウザでポチポチするのも良いけど、せっかくなのでコマンドでやる。





    7
    
    
    





    8
    
    
    
### 調査方法





    9
    
    
    





    10
    
    
    
リンクを参考にする。以下のコマンドで情報を取得できるらしい。





    11
    
    
    





    12
    
    
    
```





    13
    
    
    
openssl s_client -connect www.example.work:443 -showcerts < /dev/null 2>&1





    14
    
    
    
```





    15
    
    
    





    16
    
    
    
実際叩くと：





    17
    
    
    





    18
    
    
    
```





    19
    
    
    
$ openssl s_client -connect www.sylow-castle.work:443 -showcerts < /dev/null 2>&1





    20
    
    
    
CONNECTED(00000003)





    21
    
    
    
depth=2 O = Digital Signature Trust Co., CN = DST Root CA X3





    22
    
    
    
verify return:1





    23
    
    
    
depth=1 C = US, O = Let's Encrypt, CN = Let's Encrypt Authority X3





    24
    
    
    
verify return:1





    25
    
    
    
depth=0 CN = www.sylow-castle.work





    26
    
    
    
verify return:1





    27
    
    
    
---





    28
    
    
    
（以下略）





    29
    
    
    
```





    30
    
    
    





    31
    
    
    
まぁ一杯出てくる。





    32
    
    
    
最初のこの部分だけ拾えればいいかなー。





    33
    
    
    





    34
    
    
    





    35
    
    
    
### 実施





    36
    
    
    





    37
    
    
    
一つずつは面倒なのでシェルスクリプトとかでがんばれないか検討する。





    38
    
    
    





    39
    
    
    
* 入力：ホスト名のリスト  





    40
    
    
    
* 出力：ホスト名：改行Connectedから---までを出したい。





    41
    
    
    





    42
    
    
    





    43
    
    
    
```





    44
    
    
    
while read line; do echo $line; if [[ $line =~ ^---.*$ ]]; then break; fi; done;





    45
    
    
    
```





    46
    
    
    





    47
    
    
    
をパイプしてあげると。





    48
    
    
    





    49
    
    
    
```





    50
    
    
    
depth=2 OU = GlobalSign Root CA - R2, O = GlobalSign, CN = GlobalSign





    51
    
    
    
verify return:1





    52
    
    
    
depth=1 C = US, O = Google Trust Services, CN = Google Internet Authority G3





    53
    
    
    
verify return:1





    54
    
    
    
depth=0 C = US, ST = California, L = Mountain View, O = Google LLC, CN = www.google.com





    55
    
    
    
verify return:1





    56
    
    
    
CONNECTED(00000003)





    57
    
    
    
---





    58
    
    
    
```





    59
    
    
    
一部気になるが必要な情報は取れているからいいや。一部をシェルスクリプトにして、入力ファイル作って実行





    60
    
    
    





    61
    
    
    
### 結果行





    62
    
    
    





    63
    
    
    
実施したのは2018年8月26日





    64
    
    
    





    65
    
    
    
```





    66
    
    
    
cat ssl_access_target_hosts | while read line; do echo Host: ${line}; ssl_publisher.sh ${line}; done;





    67
    
    
    
```





    68
    
    
    





    69
    
    
    
```





    70
    
    
    
Host: www.sylow-castle.work





    71
    
    
    
depth=2 O = Digital Signature Trust Co., CN = DST Root CA X3





    72
    
    
    
verify return:1





    73
    
    
    
depth=1 C = US, O = Let's Encrypt, CN = Let's Encrypt Authority X3





    74
    
    
    
verify return:1





    75
    
    
    
depth=0 CN = www.sylow-castle.work





    76
    
    
    
verify return:1





    77
    
    
    
CONNECTED(00000003)





    78
    
    
    
---





    79
    
    
    
Host: www.google.com





    80
    
    
    
depth=2 OU = GlobalSign Root CA - R2, O = GlobalSign, CN = GlobalSign





    81
    
    
    
verify return:1





    82
    
    
    
depth=1 C = US, O = Google Trust Services, CN = Google Internet Authority G3





    83
    
    
    
verify return:1





    84
    
    
    
depth=0 C = US, ST = California, L = Mountain View, O = Google LLC, CN = www.google.com





    85
    
    
    
verify return:1





    86
    
    
    
CONNECTED(00000003)





    87
    
    
    
---





    88
    
    
    
Host: www.amazon.co.jp





    89
    
    
    
depth=3 C = US, O = "VeriSign, Inc.", OU = VeriSign Trust Network, OU = "(c) 2006 VeriSign, Inc. - For authorized use only", CN = VeriSign Class 3 Public Primary Certification Authority - G5





    90
    
    
    
verify return:1





    91
    
    
    
depth=2 C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Global Root G2





    92
    
    
    
verify return:1





    93
    
    
    
depth=1 C = US, O = DigiCert Inc, CN = DigiCert Global CA G2





    94
    
    
    
verify return:1





    95
    
    
    
depth=0 C = US, ST = Washington, L = Seattle, O = "Amazon.com, Inc.", CN = www.amazon.co.jp





    96
    
    
    
verify return:1





    97
    
    
    
CONNECTED(00000003)





    98
    
    
    
---





    99
    
    
    
Host: www.pixiv.net





    100
    
    
    
depth=2 C = BE, O = GlobalSign nv-sa, OU = Root CA, CN = GlobalSign Root CA





    101
    
    
    
verify return:1





    102
    
    
    
depth=1 C = BE, O = GlobalSign nv-sa, CN = GlobalSign Organization Validation CA - SHA256 - G2





    103
    
    
    
verify return:1





    104
    
    
    
depth=0 C = JP, ST = Tokyo, L = Shibuya-ku, OU = Development department, O = pixiv Inc., CN = *.pixiv.net





    105
    
    
    
verify return:1





    106
    
    
    
CONNECTED(00000003)





    107
    
    
    
---





    108
    
    
    
Host: dotinstall.com





    109
    
    
    
depth=2 C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Global Root CA





    110
    
    
    
verify return:1





    111
    
    
    
depth=1 C = US, O = DigiCert Inc, OU = www.digicert.com, CN = RapidSSL RSA CA 2018





    112
    
    
    
verify return:1





    113
    
    
    
depth=0 CN = dotinstall.com





    114
    
    
    
verify return:1





    115
    
    
    
CONNECTED(00000003)





    116
    
    
    
---





    117
    
    
    
Host: o2o.moneykit.net





    118
    
    
    
depth=2 C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert High Assurance EV Root CA





    119
    
    
    
verify return:1





    120
    
    
    
depth=1 C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert SHA2 Extended Validation Server CA





    121
    
    
    
verify return:1





    122
    
    
    
depth=0 businessCategory = Private Organization, jurisdictionC = JP, jurisdictionST = Tokyo, serialNumber = 0100-01-126313, C = JP, ST = Tokyo, L = Chiyoda-ku, O = Sony Bank Incorporated, OU = Members Service A, CN = o2o.moneykit.net





    123
    
    
    
verify return:1





    124
    
    
    
CONNECTED(00000003)





    125
    
    
    
---





    126
    
    
    
Host: www.b-ch.com





    127
    
    
    
depth=4 C = US, O = "Starfield Technologies, Inc.", OU = Starfield Class 2 Certification Authority





    128
    
    
    
verify return:1





    129
    
    
    
depth=3 C = US, ST = Arizona, L = Scottsdale, O = "Starfield Technologies, Inc.", CN = Starfield Services Root Certificate Authority - G2





    130
    
    
    
verify return:1





    131
    
    
    
depth=2 C = US, O = Amazon, CN = Amazon Root CA 1





    132
    
    
    
verify return:1





    133
    
    
    
depth=1 C = US, O = Amazon, OU = Server CA 1B, CN = Amazon





    134
    
    
    
verify return:1





    135
    
    
    
depth=0 CN = www.b-ch.com





    136
    
    
    
verify return:1





    137
    
    
    
CONNECTED(00000003)





    138
    
    
    
---





    139
    
    
    
Host: qiita.com





    140
    
    
    
depth=4 C = US, O = "Starfield Technologies, Inc.", OU = Starfield Class 2 Certification Authority





    141
    
    
    
verify return:1





    142
    
    
    
depth=3 C = US, ST = Arizona, L = Scottsdale, O = "Starfield Technologies, Inc.", CN = Starfield Services Root Certificate Authority - G2





    143
    
    
    
verify return:1





    144
    
    
    
depth=2 C = US, O = Amazon, CN = Amazon Root CA 1





    145
    
    
    
verify return:1





    146
    
    
    
depth=1 C = US, O = Amazon, OU = Server CA 1B, CN = Amazon





    147
    
    
    
verify return:1





    148
    
    
    
depth=0 CN = qiita.com





    149
    
    
    
verify return:1





    150
    
    
    
CONNECTED(00000003)





    151
    
    
    
---





    152
    
    
    
Host: www.4gamer.net





    153
    
    
    
depth=2 C = IE, O = Baltimore, OU = CyberTrust, CN = Baltimore CyberTrust Root





    154
    
    
    
verify return:1





    155
    
    
    
depth=1 C = JP, O = "Cybertrust Japan Co., Ltd.", CN = Cybertrust Japan Public CA G3





    156
    
    
    
verify return:1





    157
    
    
    
depth=0 C = JP, ST = Tokyo, L = Chuou-ku, O = "Aetas,Inc", CN = *.4gamer.net





    158
    
    
    
verify return:1





    159
    
    
    
CONNECTED(00000003)





    160
    
    
    
---





    161
    
    
    
Host: 5ch.net





    162
    
    
    
depth=3 C = SE, O = AddTrust AB, OU = AddTrust External TTP Network, CN = AddTrust External CA Root





    163
    
    
    
verify return:1





    164
    
    
    
depth=2 C = GB, ST = Greater Manchester, L = Salford, O = COMODO CA Limited, CN = COMODO ECC Certification Authority





    165
    
    
    
verify return:1





    166
    
    
    
depth=1 C = GB, ST = Greater Manchester, L = Salford, O = COMODO CA Limited, CN = COMODO ECC Domain Validation Secure Server CA 2





    167
    
    
    
verify return:1





    168
    
    
    
depth=0 OU = Domain Control Validated, OU = PositiveSSL Multi-Domain, CN = ssl365752.cloudflaressl.com





    169
    
    
    
verify return:1





    170
    
    
    
CONNECTED(00000003)





    171
    
    
    
---





    172
    
    
    
Host: secure.sakura.ad.jp





    173
    
    
    
depth=3 C = IE, O = Baltimore, OU = CyberTrust, CN = Baltimore CyberTrust Root





    174
    
    
    
verify return:1





    175
    
    
    
depth=2 O = "Cybertrust, Inc", CN = Cybertrust Global Root





    176
    
    
    
verify return:1





    177
    
    
    
depth=1 C = JP, O = "Cybertrust Japan Co., Ltd.", CN = Cybertrust Japan EV CA G2





    178
    
    
    
verify return:1





    179
    
    
    
depth=0 jurisdictionC = JP, serialNumber = 1200-01-079845, businessCategory = Private Organization, C = JP, ST = Osaka, L = Osaka-City, O = SAKURA Internet Inc., CN = secure.sakura.ad.jp





    180
    
    
    
verify return:1





    181
    
    
    
CONNECTED(00000003)





    182
    
    
    
---





    183
    
    
    
Host: www.nicovideo.jp





    184
    
    
    
^C





    185
    
    
    
socket: Bad file descriptor





    186
    
    
    
connect:errno=22





    187
    
    
    
Host: www.jorudan.co.jp





    188
    
    
    
depth=3 C = IE, O = Baltimore, OU = CyberTrust, CN = Baltimore CyberTrust Root





    189
    
    
    
verify return:1





    190
    
    
    
depth=2 C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Global Root CA





    191
    
    
    
verify return:1





    192
    
    
    
depth=1 C = US, O = DigiCert Inc, OU = www.digicert.com, CN = GeoTrust RSA CA 2018





    193
    
    
    
verify return:1





    194
    
    
    
depth=0 C = JP, ST = TOKYO, L = Shinjuku-ku, O = "JORUDAN CO.,LTD.", OU = Development, CN = *.jorudan.co.jp





    195
    
    
    
verify return:1





    196
    
    
    
CONNECTED(00000003)





    197
    
    
    
---





    198
    2
    sylow castle
    
Host: app.onelogin.com





    199
    
    
    
depth=3 C = SE, O = AddTrust AB, OU = AddTrust External TTP Network, CN = AddTrust External CA Root





    200
    
    
    
verify return:1





    201
    
    
    
depth=2 C = GB, ST = Greater Manchester, L = Salford, O = COMODO CA Limited, CN = COMODO RSA Certification Authority





    202
    
    
    
verify return:1





    203
    
    
    
depth=1 C = GB, ST = Greater Manchester, L = Salford, O = COMODO CA Limited, CN = COMODO RSA Domain Validation Secure Server CA





    204
    
    
    
verify return:1





    205
    
    
    
depth=0 OU = Domain Control Validated, OU = EssentialSSL Wildcard, CN = *.onelogin.com





    206
    
    
    
verify return:1





    207
    
    
    
CONNECTED(00000003)





    208
    
    
    
---





    209
    
    
    
Host: cybozulive.com





    210
    
    
    
depth=3 C = US, O = "Starfield Technologies, Inc.", OU = Starfield Class 2 Certification Authority





    211
    
    
    
verify return:1





    212
    
    
    
depth=2 C = US, ST = Arizona, L = Scottsdale, O = "Starfield Technologies, Inc.", CN = Starfield Root Certificate Authority - G2





    213
    
    
    
verify return:1





    214
    
    
    
depth=1 C = US, ST = Arizona, L = Scottsdale, O = "Starfield Technologies, Inc.", OU = http://certs.starfieldtech.com/repository/, CN = Starfield Secure Certificate Authority - G2





    215
    
    
    
verify return:1





    216
    
    
    
depth=0 OU = Domain Control Validated, CN = *.cybozulive.com





    217
    
    
    
verify return:1





    218
    
    
    
CONNECTED(00000003)





    219
    
    
    
---





    220
    
    
    
Host: portal.azure.com





    221
    
    
    
depth=2 C = IE, O = Baltimore, OU = CyberTrust, CN = Baltimore CyberTrust Root





    222
    
    
    
verify return:1





    223
    
    
    
depth=1 C = US, ST = Washington, L = Redmond, O = Microsoft Corporation, OU = Microsoft IT, CN = Microsoft IT TLS CA 5





    224
    
    
    
verify return:1





    225
    
    
    
depth=0 CN = portal.azure.com





    226
    
    
    
verify return:1





    227
    
    
    
CONNECTED(00000003)





    228
    
    
    
---





    229
    
    
    
Host: mackerel.io





    230
    
    
    
depth=2 C = IE, O = Baltimore, OU = CyberTrust, CN = Baltimore CyberTrust Root





    231
    
    
    
verify return:1





    232
    
    
    
depth=1 C = JP, O = "Cybertrust Japan Co., Ltd.", CN = Cybertrust Japan Public CA G3





    233
    
    
    
verify return:1





    234
    
    
    
depth=0 C = JP, ST = Kyoto, L = Kyoto-shi, O = "Hatena Co., Ltd.", CN = *.mackerel.io





    235
    
    
    
verify return:1





    236
    
    
    
CONNECTED(00000003)





    237
    
    
    
---





    238
    
    
    
Host: anond.hatelabo.jp





    239
    
    
    
depth=2 C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Global Root CA





    240
    
    
    
verify return:1





    241
    
    
    
depth=1 C = US, O = DigiCert Inc, OU = www.digicert.com, CN = RapidSSL RSA CA 2018





    242
    
    
    
verify return:1





    243
    
    
    
depth=0 CN = *.hatelabo.jp





    244
    
    
    
verify return:1





    245
    
    
    
CONNECTED(00000003)





    246
    
    
    
---





    247
    1
    sylow castle
    
```





    248
    
    
    





    249
    
    
    
### 感想





    250
    
    
    





    251
    
    
    
* 実はニコニコ動画httpsでなかった。





    252
    
    
    
* ルート認証局はジオトラスト、グローバルサイン、デジサート系か。





    253
    
    
    
* AmazonやGoogleはやっぱり自分のところ経由してるんだなぁと。





    254
    
    
    
* ５ちゃんねるはcloudflareを利用してたんだなぁ





    255
    2
    sylow castle
    
* MS（Azure）、Amazon、Googleは流石自分の認証局。しかしこれらでもルートCAでないのか。





    256
    1
    sylow castle
    





    257
    
    
    
### 参考





    258
    
    
    





    259
    
    
    
* HTTPS通信の疎通確認に覚えておきたい３つのコマンド：  





    260
    
    
    
https://qiita.com/greymd/items/68b0c40044a88171235a