Certificates issued to persons or entities on the U.S. Treasury Department’s Specially Designated Nationals list

Issuance Policy
1

These 47 domains, present on the SDN list, seams to have unexpired unrevoked certificates issued by Let's Encrypt:

crt.sh | %.oboronlogistika.ru
crt.sh | %.acidsazan.ir
crt.sh | %.al-nour.net
crt.sh | %.almaz-antey.ru
https://crt.sh/?q=%25.aqsatv.ps
crt.sh | %.baikalinc.ru
crt.sh | %.banksepah.ir
crt.sh | %.burgaz.ru
crt.sh | %.consolstroy.ru
crt.sh | %.daybankbroker.com
crt.sh | %.diarioamanecer.com.mx
crt.sh | %.dorstroycom.ru
crt.sh | %.fiib.com.my
crt.sh | %.gbpc.net
crt.sh | %.goldenstar-co.com
crt.sh | %.imsengco.com
crt.sh | %.internet.ir
crt.sh | %.investcapitalbank.ru
crt.sh | %.irib.ir
crt.sh | %.isleasingco.com
crt.sh | %.khazarshipping.ir
https://crt.sh/?q=%25.kk-pu.com
https://crt.sh/?q=%25.kps-co.com
https://crt.sh/?q=moreship.ru
https://crt.sh/?q=%25.morganme.com
https://crt.sh/?q=%25.niip.ru
https://crt.sh/?q=%25.omidrey.com
https://crt.sh/?q=%25.ooosgm.ru
https://crt.sh/?q=%25.ovlas-trading.com
https://crt.sh/?q=parsisotope.com
https://crt.sh/?q=%25.phiolent.com
https://crt.sh/?q=%25.pulseniru.com
https://crt.sh/?q=%25.ramor.com.tr
https://crt.sh/?q=%25.rncb.ru
https://crt.sh/?q=%25.sharif.edu
https://crt.sh/?q=%25.sinabank.ir
https://crt.sh/?q=%25.sniperafrica.com
https://crt.sh/?q=%25.star.ru
https://crt.sh/?q=%25.sudocompozit.ru
https://crt.sh/?q=tadbirenergy.com
https://crt.sh/?q=%25.tajco-ltd.com
https://crt.sh/?q=%25.tidewaterco.com
https://crt.sh/?q=%25.tmico.ir
https://crt.sh/?q=%25.trans-flot.ru
https://crt.sh/?q=%25.ukrport.org.ua
https://crt.sh/?q=%25.unomasuno.com.mx
https://crt.sh/?q=%25.zalivkerch.com

For completeness, those 20 seams to have recently expired certificates issued by Let's Encrypt:

https://crt.sh/?q=%25.ansarbank.com
https://crt.sh/?q=%25.arian-bank.com.af
https://crt.sh/?q=%25.atlassarafi.com
https://crt.sh/?q=%25.bmi.ir
https://crt.sh/?q=%25.cyberpolice.ir
https://crt.sh/?q=%25.damavandpg.co.ir
https://crt.sh/?q=%25.tmgic.ir
https://crt.sh/?q=%25.kerchport.com
https://crt.sh/?q=%25.genbank.ru
https://crt.sh/?q=%25.gosbank.su
https://crt.sh/?q=%25.ihu.ac.ir
https://crt.sh/?q=%25.lolalolita.com
https://crt.sh/?q=%25.mahantravel.com.my
https://crt.sh/?q=%25.mbbru.com
https://crt.sh/?q=%25.miguelleone.com
https://crt.sh/?q=%25.nioc.ir
https://crt.sh/?q=%25.rixointernational.com
https://crt.sh/?q=%25.royalpearlchem.com
https://crt.sh/?q=%25.transoil.com
https://crt.sh/?q=%25.usareally.com

Related: https://community.letsencrypt.org/t/according-to-mcclatchydc-com-lets-encrypt-revoqued-and-banned-usareally-com/81517/10

2

Hi @josh, I think it’s your domain, if you have an opinion about it?..

3

This thread was just brought to my attention. We will look into this today. Thanks.

In the future please email security@ with SDN reports so we can respond more quickly.

2 Likes
4

Sorry, I didn't think it could be an urgent matter, I will be careful next time!

Will you post an update once all these domains are checked and the certificates revoked if necessary? (I saw some were revoked since but not all)

5

All certificates for the domains you reported were revoked on the day of my initial comment here. Those domains are also banned from further issuance. This is standard procedure for SDN entity domains, once they are brought to our attention.

6

I confirm that all certificates related to reported domains are now revoked.

7

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.