Verified Marks

71 views

Skip to first unread message

Andrew Escobar

unread,

Nov 14, 2024, 1:02:11 PM11/14/24

to crt.sh

I’m exploring the use of BIMI and Verified Mark Certificates.

Is there a way to search for these with crt.sh or limit my search to DigiCert Gorgon log’s 16K?

census‍.io examples:
parsed.extensions.extended_key_usage.unknown=1.3.6.1.5.5.7.3.31
1.3.6.1.5.5.7.3.31 · approx. 3K

parsed.issuer.common_name: "Verified Mark"
Verified Mark · approx. 7.5K

r...@sectigo.com

unread,

Nov 15, 2024, 5:22:41 AM11/15/24

to crt.sh

Hi Andrew. The DigiCert Gorgon log is indeed where VMCs are logged. This log currently only accepts 3 roots:

https://crt.sh/?id=1412330588 (Entrust Certificate Authority - VMC1)
https://crt.sh/?id=4990144969 (DigiCert Verified Mark Root CA)
https://crt.sh/?id=4990145127 (Entrust Verified Mark Root Certification Authority - VMCR1)

If you're happy to assume that all VMCs are logged to Gorgon, and that no non-VMCs are logged to Gorgon, then you could use the search facilities on each of the corresponding CA pages, then combine the results:

Reply all

Reply to author

Forward

0 new messages