Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!

Sign In Register

Quick Links


Categories

In this Discussion

› › seccert.io legit ?
New on LowEndTalk? Please Register and read our Community Rules.

All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.

seccert.io legit ?

duyan13duyan13 Member
edited January 2015 in General

I came across that site while browsing let and their prices are quite nice :) super cheap to be honest ... But are they really legit ? I mean are they a registered company whatever ? If not how could they get these certs so cheap ?

«13

Comments

  • TinyTunnel_TomTinyTunnel_Tom Member

    I have a cert working fine from them. Support is nice and fast too

    Thanked by 14n0nx
  • 0xdragon0xdragon Member

    Yes, legit.

    Thanked by 14n0nx
  • bohdansbohdans Member

    Who is the Root CA for these certs?

  • jarjar Patron Provider, Top Host, Veteran

    Comodo wildcard in hand, $10 paid. Not bad.

  • CharlesACharlesA Member

    I keep getting an Error code: sec_error_unknown_issuer when trying to access their site via SSL. One machine works and the other doesn't. Same version of Firefox, same version of Windows.

    According to ssl labs, their SSL chain is broken. Who do I pass that info along to?
    https://www.ssllabs.com/ssltest/analyze.html?d=seccert.io&hideResults=on&latest

  • qrwteyrutiyoupqrwteyrutiyoup Member

    @CharlesA said:
    According to ssl labs, their SSL chain is broken. Who do I pass that info along to?
    https://www.ssllabs.com/ssltest/analyze.html?d=seccert.io&hideResults=on&latest

    The emails listed in the whois might be worth a shot, and hopefully someone with access will be able to fix it.

  • tommytommy Member

    no information about their company, about us, support link etc :D

  • CharlesACharlesA Member

    @qrwteyrutiyoup said:
    The emails listed in the whois might be worth a shot, and hopefully someone with access will be able to fix it.

    Thanks! I ran into the same kind of error when I was playing with the convoluted trust chain Comodo uses, but I got it figured out in the end. It needed to be Server -> intermediate #1 -> intermediate #2 -> root

    Why I had to include the root cert, I'm not sure. The browser should have that bundled in already. I guess it's a firefox thing, which makes no sense why one machine works fine but two do not. headdesk

    @tommy said:
    no information about their company, about us, support link etc :D

    Their SSL cert was issued like 2 weeks ago, so I'm sure they are still working on the site. I couldn't really pass up a wildcard for 10 bucks, and the cert is valid, so what the heck.

    Thanked by 1qm78
  • pbgbenpbgben Member, Host Rep

    +1 for legit

  • epilif09epilif09 Member

    I got one from them. instant activation and issued in 5 minutes. installed at alpha.filipe.info. no problems so far.

  • qm78qm78 Member

    Indeed weird that there's no info about their company, seems they're new on market as their '$10 invite' didn't work for me about a month ago. $10 for a ssl wildcard cert - I couldn't resist and ordered one an hour ago. Whole ordering process was pretty smooth and cert was delivered within a 5-10 minutes.

    +1 for legit

  • rmlhhdrmlhhd Member

    +1 for legit

  • colmcolm Member

    Seems to be linked to Shubhankar Kahali (aka "xedro hacker") who has a colourful history on LET with previous failed ventures such as ixonetworks.com, Intronet Servers, Igen Hosting, etc.

  • 0xdragon0xdragon Member

    @colm said:
    Seems to be linked to Shubhankar Kahali (aka "xedro hacker") who has a colourful history on LET with previous failed ventures such as ixonetworks.com, Intronet Servers, Igen Hosting, etc.

    Should've known..

  • jarjar Patron Provider, Top Host, Veteran

    @0xdragon said:
    Should've known..

    Good thing about a cert is that it takes a lot more for one to be revoked than say...a vps node to be neglected. No regrets :)

  • 0xdragon0xdragon Member

    @Jar said:
    Good thing about a cert is that it takes a lot more for one to be revoked than say...a vps node to be neglected. No regrets :)

    So he could really just be reselling free wildcard SSLs..

  • comXyzcomXyz Member

    Can anyone who using wildcart ssl from them send me a link to test?

  • SilvengaSilvenga Member

    comXyz said: Can anyone who using wildcart ssl from them send me a link to test?

    https://silvenga.com

  • TorchTorch Member

    @colm said:
    Seems to be linked to Shubhankar Kahali (aka "xedro hacker") who has a colourful history on LET with previous failed ventures such as ixonetworks.com, Intronet Servers, Igen Hosting, etc.

    I'm probably missing something here, but I can't see any link to this gentleman through whois / random searching. Could you elaborate / PM?

    Thanked by 1nunim
  • mrtzmrtz Member

    http://whois.domaintools.com/seccert.io -> Google: Shubhankar Kahali IdraTech

    IdraTech | Innovation With Love - Shubhankar Kahali
    shubhankar.ninja/?p=10

    Hi, my name is Shubhankar Kahali I am a programmer, a hacker, and a computer nerd! I love technology and the power of Internet, I have knowledge in seven ...

    Thanked by 1tszilassi
  • TorchTorch Member

    I did not see the page with Idratech on the top. Danke schon.

  • mrtzmrtz Member
    edited January 2015

    And just as a bonus you have this; http://reverseip.domaintools.com/search/?q=idratech.co

    Seems he's getting better at covering his tracks, tho.

  • wychwych Member

    So a self proclaimed hacker is running a SSLCert site... seems legit.

  • cassacassa Member

    @colm said:
    Seems to be linked to Shubhankar Kahali (aka "xedro hacker") who has a colourful history on LET with previous failed ventures such as ixonetworks.com, Intronet Servers, Igen Hosting, etc.

    AFAIK intronet closed because LowEnd deadpooled, and some days later I got a full refund.

    My domain has been moved to an other registrar, for free, by him.

  • wychwych Member

    @cassa said:
    My domain has been moved to an other registrar, for free, by him.

    By the sounds of it at least he closed down nicely.

  • mrtzmrtz Member
    edited January 2015

    They do have a contact page tho, it's just hidden. https://seccert.io/contact.html

    (Edit: Yes I know the form doesn't work, but look at the address vs. the whois)

  • 0xdragon0xdragon Member

    @wych said:
    By the sounds of it at least he closed down nicely.

    No he did not, my two domains are still stuck.

    Thanked by 2wych TriDoxiuM
  • isaaclisaacl Member

    The PayPal payments go to Amit Jawandal, wonder who that is...

  • wychwych Member

    @0xdragon said:
    No he did not, my two domains are still stuck.

    Oh he kept the domains... I read it as he pushed them out to a registrar for you.

  • GStanleyGStanley Member
    edited January 2015

    Ho hum.

    http://bgp.he.net/ip/178.239.55.115#_dns

    Gives us Google : https://www.google.com/webhp?sourceid=chrome-instant&ion=1&espv=2&ie=UTF-8#sourceid=chrome-psyapi2&ie=UTF-8&q="ns2.idannetwork.com"

    SSLCheapest.com (VestaCP default page)

    And the active http://SSLCheap.org - Selling Wildcard for $10. VestaCP all around.

    Whois for SSLCheap.org, new name, new country:

    Admin Name:Dowen Jay
Admin Organization:70INC
Admin Street: Sol 187
Admin City:Madrid
Admin State/Province:IL
Admin Postal Code:28016
Admin Country:US
Admin Phone:+1.658547854
Admin Phone Ext:
Admin Fax:
Admin Fax Ext:
Admin Email:[email protected]
Sign In or Register to comment.