Re:Private key for *.xboxlive.com certificate disclosed
by 0x0 on Tuesday December 08, 2015 @06:36PM
(#10700663)
EV certificates can't be issued for wildcard domains, so probably not EV :)
Re:Private key for *.xboxlive.com certificate disclosed
by johncolanduoni on Tuesday December 08, 2015 @06:52PM
(#10700755)
:P forgot they said it was a wildcard (it was only in the title, you know).
edit: Actually I just checked the Chrome CRLSet, it doesn't appear to have revocations for any certificates from "Microsoft IT SSL SHA2" :(. You can turn on OCSP verification in most browsers, which should do it.