My SSL Certificate was registered to random person!


#1

My domain is: https://univo.app

If you visit my page and check out the certificate details, it says the certificate has been registered to www.williamscarpentry.co.uk

I’ve no idea why it says that, I’ve not even heard of this person! When checking the dates it seems we both registered our certificates on the same day, so maybe there’s been a mix-up?

I tried to contact LetsEncrypt but they told me to just ask here on the forums.

Would love some help, thanks!


#2

Hi @Samwise98

this is completely normal. Checking your website you use two certificates (one www, one non-www https://check-your-website.server-daten.de/?q=univo.app )

One:

CN=www.williamscarpentry.co.uk
	18.12.2018
	18.03.2019
	16x.ninja, 220argon.in.ua, app.solucionesidem.com, arrinop.com, basebrew.com, benjamax.com, 
bighappyface.io, bitfolios.com, bravi.me, brianyatesportfolio.com, caesiumstudio.com, canada-kicks.ca, 
candsconstruction.co.za, cdn.golfisverige.com, centerline.impactwrap.com, charwall.samuelting.io, 
chcewiecej.pl, cms-test-it.stokkur.is, coleta.relatoweb.com.br, customerportal.plastronics.com, davidchea.me, 
dev.genedig.org, elsondelaloma.com, eventhelper.com.br, firebase.simone.pro, firebase.zooom.no, 
fitnessdefense.impactwrap.com, fornecedores.meucasamento.online, frontendman.net, 
frontops.exhands.org, fun.parafuzo.com, gurukulgames.com, hhsrsconsensus.com, impulsomx.org, 
jardiparc.stepinsight.com.au, jsmob.io, julien.digital, live.hydrafpv.com, lumosign.datayeah.com, 
myplanetweb.com, odin-sandbox.gothor.com, parse.workhere.com, photos.seanpotts.com, raginievents.com, 
rubric.jigsawacademy.com, sandhoorahomes.lk, schools.pixelbots.io, seanpotts.com, silverstone.io, 
simsim.move4mobile.io, snb.tuition.io, staging.mindfuls.org, suab.it, tasdev.me, tbhl.ca, test.busunkim.com, 
test.genedig.org, testing.portal.smartshelf.com, th.fyqlt.ml, thatoneinterestingpageyousaw.danf.tk, 
travelingtrotter.com, tv-bom.com, univo.app, waybots.com, wissensdurst.io, www.16x.ninja, www.abxdb.com, 
www.air-tech.com.ua, www.anabelledecaix.com, www.bighappyface.io, www.bitfolios.com, 
www.candsconstruction.co.za, www.corocn.jp, www.dscova.com, www.farmaimperia.it, www.feedpresso.com, 
www.h2gaz.com.br, www.impulsomx.org, www.jagdcake.com, www.luxerus.in, www.motroo.com, 
www.myonair.de, www.myplanetweb.com, www.oralkure.com, www.pksprojects.org, www.purchasejournal.com, 
www.pvlm.org.ar, www.shahidshaikh.com, www.tbhl.ca, www.topi.fun, www.torvgarden-tannklinikk.no, www.tv-bom.com, 
www.vitalcard.com, www.waybots.com, www.williamscarpentry.co.uk, www.yashghelani.com, xvhost.com, 
yesicatering.com, yieldcurveindicator.com, zeltis.net - 100 entries

The other:

CN=abxdb.com
	18.12.2018
	18.03.2019
	33m.io, a-mais.pt, abxdb.com, allblueapp.com, app.kwis.pl, appac.us, appsirva.me, ausdoc.com.au, 
bet.preakness.com, booking.partynail.com, cryptotracker.jackdavis.me.uk, currently.shrite.sh, 
dealer.keepneye.com, dev.lingusocial.com, eshopapp.xyz, firebase.youpool.io, fukaru.app, golf.reckhard.win, 
greppy.us, historicfunds.com, hopefully.uptick.works, host.unipos.app, hq.heywalnut.com, itemmanager.uk, 
jobhero.org, jobreferraljoy.com, joshfreeman.io, jtaindy.com, koppyapp.com, longshort.ftapps.com, 
maggie.work, mapa.to-ny.cz, martinfojtik.com, menencia.com, mouvyourbaudet.com, muzetv.app, 
nickdeblegny.com, open.univo.app, phobium.com, photobooth.limhenry.xyz, pivotcafe.com, predict-game.com, 
puroaluminio.com.py, quinszouls.tk, redflagreporter.com, resetsuites.com, rit-inc.co.jp, s6industries.com, 
scraphousemedia.com, selvadurai.com, smarthollowent.com, stonybrookstrings.com, thruwayguide.com, 
time2yak.co.uk, tuxedolab.info, uzbooks.com, wasm.nerdkid93.xyz, web.ddone.app, whimms.com, www.a-mais.pt, 
www.appac.us, www.appsirva.me, www.ausdoc.com.au, www.brianyatesportfolio.com, www.dlknet.net, 
www.elsondelaloma.com, www.entropiasales.com, www.eshopapp.xyz, www.historicfunds.com, 
www.itemmanager.uk, www.jobhero.org, www.jobreferraljoy.com, www.kerangdesa.com, www.kicktronics.com, 
www.luffanet.com.tw, www.menencia.com, www.muzetv.app, www.nickdeblegny.com, www.nutheorie.nl, 
www.onymos.com, www.organtik.com, www.pivotcafe.com, www.pro-5.de, www.proyectogbch.com, 
www.ronandersonvocals.com, www.sayi.do, www.scraphousemedia.com, www.sencillogic.com, 
www.stojanovic.us, www.stumpsapp.com, www.tanahidaman.com, www.tuxedolab.com, www.tuxedolab.info, 
www.univo.app, www.unnon.com, www.v-hmutual.com, www.vianatecnologia.com.br, www.wisctix.com, 
www.zekehernandez.com, агентствооценки.рф (xn--80aecibsnvcia7amb7d.xn--p1ai) - 100 entries

You see: Every certificate has 100 domain names. But always one (the same) CN. The CN entry is completely unrelevant.

100 entries are the maximum Letsencrypt allows. So it’s easier to manage a lot of domain names.


#3

Ohhhh I see, thank you so much! Saved me a lot of panic, thanks!! :smiley:


#4

You may not know each other, but you’re all using Fastly’s CDN:

univo.app.                    60     A  151.101.1.195
univo.app.                    60     A  151.101.65.195
www.univo.app.                60     A  151.101.1.195
www.univo.app.                60     A  151.101.65.195
williamscarpentry.co.uk.      14400  A  151.101.1.195
williamscarpentry.co.uk.      14400  A  151.101.65.195
www.williamscarpentry.co.uk.  14400  A  151.101.1.195
www.williamscarpentry.co.uk.  14400  A  151.101.65.195
16x.ninja.                    300    A  151.101.1.195
16x.ninja.                    300    A  151.101.65.195
www.16x.ninja.                300    A  151.101.1.195
www.16x.ninja.                300    A  151.101.65.195

closed #5

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.