Reported Bad Certificates

296 sites used compromised RSA keys

This is a database of bad SSL certificates reported by SSL Blacklist users.

These are websites using certificates with a weak (essentially worthless) RSA keypair as a result of the Debian OpenSSL fiasco. This means that information exchanged with these sites, while the connection appears to be secure, is susceptible to interception or modification.

Only valid certificates signed by a default-trusted CA are included. The list is ordered according to the Netcraft ranking of the site, with presumably higher-profile sites at the top. Sites that I thought might be particularly interesting are displayed in bold. Also included are the 55 sites that have been fixed after being reported bad. In this case the archived certificate is the actual, weak certificate used by the server when the site was reported.

Netcraft Ranking		Server		URL		Archived Cert
1216		login.seznam.cz		link		cert		Fixed
2666		www.jappy.de		link		cert
7599		kaethe.second-home.org		link		cert
12247		garage.maemo.org		link		cert		Fixed
16270		memberservices.optuszoo.com.au		link		cert
20646		rec1.globalepanel.com		link		cert
20882		wnu.com		link		cert		Fixed
28826		webmail.iu.edu		link		cert
28967		trading.zecco.com		link		cert
29030		ticket.uk.clara.net		link		cert
29240		ssl.aukro.cz		link		cert
33773		netcom.no		link		cert
38323		www.linkpointcart.net		link		cert		Fixed
39689		www.w4ck1ng.com		link		cert
45786		www.gimahhot.de		link		cert
53869		support.steampowered.com		link		cert		Fixed
64343		www.affiliwelt.net		link		cert
67502		secure.hostelworld.com		link		cert
68172		mail.gandi.net		link		cert
69808		ssl.nordija.com		link		cert
73009		asiointi.elisa.fi		link		cert
74731		billing.gamigogames.de		link		cert
78228		ssl.teszvesz.hu		link		cert
84531		www.adrive.com		link		cert
89588		app.vendio.com		link		cert
90985		www.mozdev.org		link		cert		Fixed
91267		pannonline.pannon.hu		link		cert		Fixed
100611		www.united-mobile.com		link		cert
102173		secure.classicalarchives.com		link		cert		Fixed
108880		squirrel.cf.ac.uk		link		cert
131843		www.mediaon.biz		link		cert
147176		nic-nac-project.org		link		cert
151680		secure.equitas.hu		link		cert		Fixed
152411		www.gelaskins.com		link		cert
157432		www.guut.de		link		cert
178293		motorolabackup.tarsin.com		link		cert		Fixed
179302		forum.bytemark.co.uk		link		cert		Fixed
185153		gigahost.dk		link		cert
194440		www.billettservice.no		link		cert		Fixed
200402		www.123handydiscount.de		link		cert
205911		www.humyo.com		link		cert
213376		www.verwandt.de		link		cert
213569		www.edisk.cz		link		cert
218607		www.we7.com		link		cert
224851		secure.hostels.com		link		cert
229793		help.domaindirect.com		link		cert
235701		nic-nac-project.de		link		cert
243411		account.meraki.com		link		cert		Fixed
246492		www.walbusch.de		link		cert
246756		www15.order.dominos.com		link		cert
264365		mail.orcon.net.nz		link		cert
264871		forge.betavine.net		link		cert
264999		shop.bountybayonline.com		link		cert
282778		thankyou.duoservers.com		link		cert
286538		www.freelancermap.de		link		cert
287360		www.clinique.com		link		cert		Fixed
288532		www.geezeo.com		link		cert
293406		www.mr-money.de		link		cert
305679		transxpress.e-forexgold.com		link		cert
319403		www.100pro-ersatzteile.de		link		cert
320799		apoversandpunkt.de		link		cert
323928		www.multielectronics.de		link		cert
338450		www.fxpro.com		link		cert
353557		ssl.vps4less.de		link		cert
354075		systemausfall.org		link		cert
372037		www.mailfoundry.com		link		cert
386135		www.clickpass.com		link		cert		Fixed
387480		www.clearcheckbook.com		link		cert
396173		openid.sun.com		link		cert		Fixed
402313		www.cs.auckland.ac.nz		link		cert
407130		www.streamfile.com		link		cert
407485		navngo.com		link		cert
419253		store-phpa.phparch.com		link		cert
422701		api.ote.gandi.net		link		cert
432457		www.iatatravelcentre.com		link		cert
443827		www.statistik.bayern.de		link		cert
444619		ueberweisung.kartenabrechnung.de		link		cert
492539		www.elternimnetz.de		link		cert
492661		www.ahaoho.de		link		cert
493658		blogbackupr.com		link		cert		Fixed
496282		www.interconnex-tickets.com		link		cert
502918		kfz.allianz.de		link		cert
505907		warriornet.rc.edu		link		cert
528644		www.fortisfinanz.de		link		cert
528913		www.intl-alliance.com		link		cert
541555		ssl.buffed.de		link		cert
572181		gewinnspiel.deutschepost.de		link		cert
581517		novafilm.tv		link		cert
587362		secure.muenchner-singles.de		link		cert
617016		www.edingershops.de		link		cert
626452		store.untangle.com		link		cert
637444		www.awbkoeln.de		link		cert
638059		ticketsystem.dynamic-support.ch		link		cert
650775		ssl.aktion-deutschland-hilft.de		link		cert		Fixed
663812		fossbazaar.org		link		cert
665486		www.partnerplusbenefit.com		link		cert		Fixed
686171		portal.stir.ac.uk		link		cert		Fixed
688215		secure.prleap.com		link		cert		Fixed
689484		www.gilt.com		link		cert
697704		www.purvital.de		link		cert
703725		www.dailyme.tv		link		cert
717307		www.partner.f-secure.com		link		cert
750730		ssl.luupo.de		link		cert
756985		www.forumwarz.com		link		cert
766950		www2.aldi-blumenservice.de		link		cert
787205		www.joinrudy2008.com		link		cert
789503		www.buyandread.com		link		cert
796872		www.1-apo.de		link		cert
819840		secure.cardaccess.com.au		link		cert
821084		lopsa.org		link		cert		Fixed
827688		anmeldung.cityweb.de		link		cert
845039		kvv.mobilesticket.de		link		cert
853783		www.mymarket.ch		link		cert
917127		milibib.missing-link.de		link		cert
930407		www.kaposvar.hu		link		cert		Fixed
953416		paymuzo.gpe.cz		link		cert		Fixed
986266		www.detech-shop.de		link		cert
993544		scanner.masecure.com		link		cert
994501		www.your-freedom.net		link		cert
1012816		wso2.org		link		cert
1076210		my.server.lu		link		cert
1083773		spenden.drk.de		link		cert
1104924		www.within3.com		link		cert
1121050		www.poweradmin.org		link		cert
1130595		www.dfg-vk.de		link		cert
1157048		uva.affinitycircles.com		link		cert
1161621		www.toner-dumping.de		link		cert
1194336		gutscheine.balitherme.de		link		cert
1213896		www.mail2web.ch		link		cert
1224147		www.sms77.de		link		cert
1230075		dhl.arbeitregional.de		link		cert
1231051		lra.le.ac.uk		link		cert
1287797		www.bidder.hu		link		cert
1297400		www.lld-shop.de		link		cert
1334986		ccp.netcup.net		link		cert
1367056		www.hygi.de		link		cert
1412001		www.groby.hu		link		cert		Fixed
1470982		www.moneytrackin.com		link		cert
1489277		www.perweek.co.nz		link		cert
1509587		ps-ssl.de		link		cert
1528332		www.zaplive.tv		link		cert
1640875		www.roosterteeth.com		link		cert
1667087		laxworld.com		link		cert
1672330		www.robert-betz.de		link		cert
1798392		www.aokplus-online.de		link		cert
1827678		online.vdm-verlag.de		link		cert
1839200		www.ciando.com		link		cert
1888670		www.redkings.com		link		cert
1890867		e-iroda.eon-gaz-deldunantul.com		link		cert		Fixed
1904884		mssi.auteuil.inserm.fr		link		cert
1918242		secure.bioneers.org		link		cert		Fixed
1939616		www.freakware.de		link		cert
1982921		www.olseninvest.com		link		cert
1986080		www.meded.umn.edu		link		cert
1989118		www.probierpioniere.de		link		cert
2012208		obchod.viry.cz		link		cert
2035020		xlhost.de		link		cert
2046214		studies2.hec.fr		link		cert
2062601		www.recardrive.com		link		cert
2099929		www.drkcms.de		link		cert
2181044		www.photovu.com		link		cert
2181694		www.tierschutzbund.de		link		cert
2191151		www.fortknox.de		link		cert
2196883		www.ekomi.de		link		cert
2213820		enigma.sanger.ac.uk		link		cert
2295491		www.my-size.de		link		cert
2470849		access.austinisd.org		link		cert		Fixed
2521649		www.seedtest.org		link		cert		Fixed
2562334		konto.onvista-bank.de		link		cert
2566245		multizakupy.pl		link		cert
2643539		bplaced.net		link		cert
2688487		kiwicon.org		link		cert
-		www.buy-it24.com		link		cert
-		www.freihausdeutschland.de		link		cert
-		solicitation.calwater.ca.gov		link		cert
-		signup.duluth.cpinternet.com		link		cert
-		www.1a-apo.de		link		cert
-		www.abk.be		link		cert
-		secure.weonlydo.com		link		cert
-		secure.pittsburghlive.com		link		cert
-		secure.manchester.gov.uk		link		cert
-		www.akkutop.de		link		cert
-		www.amango.at		link		cert
-		plazes.com		link		cert
-		webmail.infocity.de		link		cert
-		www3.tools.ietf.org		link		cert
-		webmail.agencynet.de		link		cert
-		www.chatterous.com		link		cert
-		www1.tools.ietf.org		link		cert
-		www.computeremporium.hu		link		cert
-		www.secure-registration.de		link		cert
-		www.ascentmp.com		link		cert
-		logotomie.salesking.eu		link		cert
-		videosift.com		link		cert
-		www.wizard101.com		link		cert
-		support.digitalbrain.com		link		cert
-		proposals.etf.ee		link		cert
-		pos.e-xact.com		link		cert
-		www.audiobile.com		link		cert
-		www.nsw.liberal.org.au		link		cert
-		lehmanns.ciando.com		link		cert
-		my.site.lu		link		cert
-		my.xlogon.net		link		cert
-		lambda.ibone.ch		link		cert
-		gmx.youniik.com		link		cert
-		float.swa.lufthansa.de		link		cert
-		omega.ibone.ch		link		cert
-		bop.mailtoprint.de		link		cert
-		panel.web4all.fr		link		cert
-		youni-mobile.de		link		cert
-		reseller-de.f-secure.com		link		cert
-		wiki.tmm.cx		link		cert
-		shop.balticdivecenter.de		link		cert
-		www.einkaufstrolley.de		link		cert
-		shop.mcdos.nl		link		cert
-		shop.mikromarken.de		link		cert
-		shop.obocom.de		link		cert
-		srv9.sysproserver.de		link		cert
-		www.myautoforex.com		link		cert
-		www.martlet.mcgill.ca		link		cert
-		www.intranet.pbu.edu		link		cert
-		www.boltertekelo.hu		link		cert
-		ucf.affinitycircles.com		link		cert
-		ssl.rizard.com		link		cert
-		vserver.schneider-consulting.it		link		cert
-		secure.weidelt.de		link		cert
-		cartxl.net		link		cert
-		incircle.wiu.edu		link		cert
-		incircle.gamecocknetwork.org		link		cert
-		www.nicknumber.de		link		cert
-		www.operationimmortality.com		link		cert
-		www.gabal-verlag.de		link		cert
-		gnn.ufalumni.ufl.edu		link		cert
-		drosophila.med.harvard.edu		link		cert
-		docs.jbosson.redhat.com		link		cert
-		coderanger.net		link		cert
-		www.salesking.eu		link		cert
-		kar.nyme.hu		link		cert
-		www.simply-connect.de		link		cert
-		www.ostprodukte-versand.de		link		cert
-		backup.nitorsi.com		link		cert
-		atmail.ukservers.net		link		cert
-		www.topatoco.com		link		cert
-		www.chainlove.com		link		cert
-		www.ifortuna.sk		link		cert
-		pownce.com		link		cert
-		www.datart.sk		link		cert
-		www1.ltd.uk		link		cert
-		secure.bookhostels.com		link		cert
-		gamma.pwsz.bialapodlaska.pl		link		cert
-		www.foxinus.cz		link		cert
-		www.sanumvitalis.de		link		cert
-		www.ime.de		link		cert
-		patownsend.com		link		cert
-		www.ghelir.ro		link		cert
-		password.dtu.dk		link		cert
-		www.holonyx.com		link		cert
-		www.humpty.de		link		cert
-		www.polinator.de		link		cert
-		oodi.tkk.fi		link		cert
-		ldap.buffalo.edu		link		cert
-		online.integrity.hu		link		cert
-		mobilitas.org.hu		link		cert
-		www.kreisalarm.de		link		cert
-		www.line5.net		link		cert
-		www.mitfahrzug.de		link		cert
-		www.messermarkt.at		link		cert
-		mail.atlascomm.net		link		cert
-		mail.monash.edu.au		link		cert
-		240plan.ovh.net		link		cert		Fixed
-		vpn.muni.cz		link		cert		Fixed
-		download.spidynamics.com		link		cert		Fixed
-		ssl.ormondskiclub.com.au		link		cert		Fixed
-		www.zoonar.com		link		cert		Fixed
-		www.doxxbet.sk		link		cert		Fixed
-		mail.icedsl.hu		link		cert		Fixed
-		panel.bytemark.co.uk		link		cert		Fixed
-		secure.interware.hu		link		cert		Fixed
-		rediview.remotedynamics.net		link		cert		Fixed
-		openwrt.org		link		cert		Fixed
-		www.navigon.com		link		cert		Fixed
-		www.openwebtools.org		link		cert		Fixed
-		va.scanist.com		link		cert		Fixed
-		www.e-szamla.hu		link		cert		Fixed
-		www.netbank.hu		link		cert		Fixed
-		childsafenetwork.org		link		cert		Fixed
-		mail.st-anselms.com		link		cert		Fixed
-		online.piu.org		link		cert		Fixed
-		thetachi.affinitycircles.com		link		cert		Fixed
-		www.mvmpiacter.hu		link		cert		Fixed
-		control.maxer.hu		link		cert		Fixed
-		www.lfla.org		link		cert		Fixed
-		flotta.pannon.hu		link		cert		Fixed
-		www.everydaymathonline.com		link		cert		Fixed
-		www.tasmap.tas.gov.au		link		cert		Fixed

Last updated: Aug-13, 2008.