Sectigo Dodo CT Log is not working

[David Miller]

I currently cannot push my certificate to it. My root CA is at https://go.davidmiller.top/r4. This certificate is accepted by dodo ct log. Where goes wrong?

[Rob Stradling]

Hi David.  It worked for me just now:

> wget --no-verbose --post-file r4.json https://dodo.ct.comodo.com/ct/v1/add-chain

2024-01-08 14:54:29 URL:https://dodo.ct.comodo.com/ct/v1/add-chain [226/226] -> "add-chain" [1]

This is JSON I submitted:

> cat r4.json

{"chain":["MIIFfDCCA2SgAwIBAgIQR4vBhiLAcCljG8w536MqizANBgkqhkiG9w0BAQwFADBXMQswCQYDVQQGEwJDTjEkMCIGA1UECgwbRGF2aWQgTWlsbGVyIFRydXN0IFNlcnZpY2VzMSIwIAYDVQQDDBlEYXZpZCBNaWxsZXIgUm9vdCBDQSAtIFI0MCAXDTIzMDEwNDAwMDAwMFoYDzIwNTMwMTAzMjM1OTU5WjBXMQswCQYDVQQGEwJDTjEkMCIGA1UECgwbRGF2aWQgTWlsbGVyIFRydXN0IFNlcnZpY2VzMSIwIAYDVQQDDBlEYXZpZCBNaWxsZXIgUm9vdCBDQSAtIFI0MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAsZQ1dm78cU5xGinQu4RoSjWeVpuihfGj1TLKfOfmKIpR03QTaPK/ffugo9uQXw8ml2vWpMPyReRGcb8nRv90vTdD9m5j4fhFsCYgqYZpKEueO7H9oi+r26dWVcQ9Dh+hjc9Oo8fwU61rd/R9LallYNo8GqURQcneuB1a9psRzvk7yUgM+e84N5HaTJPY3lVG5ld9ilki/lUUeT4U+laCAyIIGE7OHhoZN3hHrf6oZTJQ4NLHeAlF/jvhx70ecCtuoRmBX705EkWPXGz8SpNF6tBIZc6rR/kEPQr4Z0p7AG9yw7B1dbbYRTmywnpMedvPbAvQDeQzpNJoK1qNZ3d3/zPjT+LYhnxB1USmpLxmAT/tqi+klHBzlV+pbOYNSAdBG1j8YL1QDqKsz8HMDeO1idQzEV8xuo5kC/x7gBsmm1YrgL3IsBViNOFuoM6723poyodmW0loU3axJuzut9hDtcODKW6rohjfAlectDrfrDlIChgBVuZNuwmBvc4ln/HyCfvXYOwL9gD/lyLRvBFYUgso4tSRBC1Q2Yqxmn9+/OOZJBihuvecy30A67nUvyWsBqFcjHGfYgqV12gR3ozMtCJp+uh8O2Dqx58kP3AbRB0AWgeP5/q2hZh1Q/VgvEBYBkbBCX4E6zu2nAGCXCnnW8LSB5nvsMbxj9xIuhqEeUcCAwEAAaNCMEAwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUsXHOViNe0f9mepHnorKAM1RRa5kwDgYDVR0PAQH/BAQDAgGGMA0GCSqGSIb3DQEBDAUAA4ICAQBn7txM3oy4KJnDKkKC7dA4A0FhSf5f7W7JuPDbIzPkpg+34Dps+STwXQnq++UgNDoNncyMQdcRiulmvc1g6XrOU/esmPa2+RlZNZKLqpdpMFtiNoJYx3Ywnboy0+GHBdNLNO9oloNJukQVL3dnxZYcnIzvUcGqB01V1GrtWNgLFLe65/YTR0h2kUmBSuW3yrWHB49XA4tBeNSQRbd6as3KweaDcqtmFessfdrLBLE8ezYGlpRRPMiVuLrS6zzBGcKk4IVc6q2icRa7HW+PoXRc4Iyxi1TjdBXYTU84ABidXk+F6bVCmzrpl0rvoqrF/aLTXlikI8MK32PKLPtyRpHBjMNF+YurDnuFoQvpuGlG46gvn4IGWr2gFX0iEAxjcUAnqqFnGhhPTWjzEbBqLroqCYP9VwWzPMP9Z/D9IJsQ0wGuOIxEYmr/crjaYfo3OEvHn/0YStLFEeG/Lu2daO2lKzgI8rJKxN8CdOm76l3sPmmlGW3rW6soP71ZHzV6dwguC+z5blSrli/kQMhHYCY9djac9/2a29RvfRn/YWq+5tauatZAM+yrcitpA6FUIcxQKRcsNg94C06lIdmzW6r/vrbY2rPKKKlvgKWmh6J2wpSU6qoEFQgQj6pt6xJxowS3DQ6x3NouFHktbwzg7FWIePBWrEh9idQOo1Mn6jgCUw=="]}

And this is the SCT that was returned:

> cat add-chain
{"sct_version":0,"id":"23b9raxl59CVCIhuIVm9i5A1L1/q0+PcXiLrNQrMe5g=","timestamp":1704725626161,"extensions":"","signature":"BAMARzBFAiArYTyUpeomZt6MpGTroBm2mKmFDvDyxutKTCw9RAj3GAIhAMH0Do2nAamrwSjJdjkiFwGej058f0tpMKD33kJAwbdu"}⏎

---

From: certificate-...@googlegroups.com <certificate-...@googlegroups.com> on behalf of David Miller <david...@gmail.com>
Sent: 06 January 2024 11:34
To: certificate-transparency <certificate-...@googlegroups.com>
Subject: Sectigo Dodo CT Log is not working

 

david...@gmail.com appears similar to someone who previously sent you email, but may not be that person. Learn why this could be a risk

CAUTION: This email originated from outside of the organization. Do not click links or open attachments unless you recognize the sender and know the content is safe.

I currently cannot push my certificate to it. My root CA is at https://go.davidmiller.top/r4. This certificate is accepted by dodo ct log. Where goes wrong?

--
You received this message because you are subscribed to the Google Groups "certificate-transparency" group.
To unsubscribe from this group and stop receiving emails from it, send an email to certificate-transp...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/certificate-transparency/9967930b-50db-45cb-8602-11d80210d612n%40googlegroups.com.

H