summaryrefslogtreecommitdiffstats
path: root/website/certs.asc
blob: 467cb5e5c92ba47a38087fb21743dece5499a6fc (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

The following is an up-to date list of SHA-1 and SHA-256 fingerprints of
all SPKI (Subject Public Key Info) of each X.509 certificate Fripost
uses on its publicly available services.  Please consider any mismatch
as a man-in-the-middle attack, and let us know immediately! --
admin@fripost.org


These certificates are all issued by the Let's Encrypt Certificate
Authority, and are submitted to Certificate Transparency logs. You can
view all issued Let's Encrypt certificates at crt.sh:

    https://crt.sh/?Identity=%25fripost.org&iCAID=16418

The SPKI of our X.509 certificates are also available in PEM format at:

    https://git.fripost.org/fripost-ansible/tree/certs/public ,

Git repository from which this fingerprint list was generated, at commit ID
ef43052 from Tue, 12 Jul 2016 03:10:33 +0200.


 * IMAP server
    imap.fripost.org:993 (IMAP over SSL), sieve.fripost.org:4190 (ManageSieve, STARTTLS)
    X.509: https://crt.sh/?spkisha256=60db1731fcf1f860de7e84c1a2c48cb9cded004750b21fbf67616b13e8ad7de5&iCAID=16418&exclude=expired
    SPKI:
      SHA1   79:EE:C2:1B:9B:5A:67:D8:1F:DF:D2:F5:2A:A3:68:EB:02:FF:5A:F2
      SHA256 YNsXMfzx+GDefoTBosSMuc3tAEdQsh+/Z2FrE+itfeU=

 * SMTP servers
    smtp.fripost.org:587 (Mail Submission Agent, STARTTLS)
    X.509: https://crt.sh/?spkisha256=a2726ec6514d6670aaf49008c17a3f28f92ee981e530d10e19d6847ceaa3c905&iCAID=16418&exclude=expired
    SPKI:
      SHA1   A7:DB:17:4B:55:94:7B:8F:BB:90:5F:BC:48:CC:99:FD:29:73:C7:D8
      SHA256 onJuxlFNZnCq9JAIwXo/KPku6YHlMNEOGdaEfOqjyQU=

    mx1.fripost.org:25 (1st Mail eXchange, STARTTLS)
    X.509: https://crt.sh/?spkisha256=63c2a1dce0bc20a6cde16eae1cec71cf42270d1e460f039dc2fdea1e274870ba&iCAID=16418&exclude=expired
    SPKI:
      SHA1   DF:D7:33:FB:96:EC:39:58:4E:31:05:35:E0:DF:EA:59:27:90:D4:0D
      SHA256 Y8Kh3OC8IKbN4W6uHOxxz0InDR5GDwOdwv3qHidIcLo=

    mx2.fripost.org:25 (2nd Mail eXchange, STARTTLS)
    X.509: https://crt.sh/?spkisha256=9307b7878124e4e79f9871ee88cb9d4a82ea9e7c27065a21a81d902567a8d27a&iCAID=16418&exclude=expired
    SPKI:
      SHA1   A0:85:B9:51:9F:F1:71:3C:F6:61:C1:6A:7E:DC:F4:91:8A:64:32:11
      SHA256 kwe3h4Ek5OefmHHuiMudSoLqnnwnBlohqB2QJWeo0no=

 * Web servers
    fripost.org:443, www.fripost.org:443 (website), wiki.fripost.org:443 (wiki)
    X.509: https://crt.sh/?spkisha256=7d0fa06aeef68b039feab997bd8eff41e981fa46218b13c263f03f108af76adb&iCAID=16418&exclude=expired
    SPKI:
      SHA1   B8:CB:E1:30:7E:BA:03:C3:DB:BE:BF:65:FD:80:68:F8:D3:E0:1C:7D
      SHA256 fQ+gau72iwOf6rmXvY7/QemB+kYhixPCY/A/EIr3ats=
    Backup pubkey:
      SHA256 MYhOgCyUOp8NRGxa1LZc57g0wREA3kV8C+4SsrDajt8=

    mail.fripost.org:443, webmail.fripost.org:443 (webmail)
    X.509: https://crt.sh/?spkisha256=4877e788c11aa71798a39613ff68cffa7f96b2d35a62084332165469d2e53c39&iCAID=16418&exclude=expired
    SPKI:
      SHA1   4F:E7:42:40:98:35:51:CF:93:65:EF:F2:D1:7C:3C:46:60:64:2C:30
      SHA256 SHfniMEapxeYo5YT/2jP+n+WstNaYghDMhZUadLlPDk=
    Backup pubkey:
      SHA256 /Tt92H3ZkfEW1/AOCoGVm1TxZl7u4c+tIBnuvAc7d5w=

    lists.fripost.org:443 (list manager)
    X.509: https://crt.sh/?spkisha256=38bc7584e12a9c2752ffb660cd3cc097c220fc2c29cf9318f49f458ac860ebfd&iCAID=16418&exclude=expired
    SPKI:
      SHA1   E9:45:89:19:95:44:B1:C7:61:C1:75:4B:A1:3F:8C:38:D4:10:A5:33
      SHA256 OLx1hOEqnCdS/7ZgzTzAl8Ig/Cwpz5MY9J9Fishg6/0=
    Backup pubkey:
      SHA256 v/Ow0Ou2m08HO10wxci1IVrMC/pbihnoDNxvUwKBsMY=

    git.fripost.org:443 (git server and its web interface)
    X.509: https://crt.sh/?spkisha256=1cea225e00bbb68973677d5beb95336c02a1a42080ec8d2235d3bb344b8bd255&iCAID=16418&exclude=expired
    SPKI:
      SHA1   02:D7:7C:F0:16:F4:55:0D:C3:6B:A1:C4:B6:95:1B:65:26:64:C8:28
      SHA256 HOoiXgC7tolzZ31b65UzbAKhpCCA7I0iNdO7NEuL0lU=
    Backup pubkey:
      SHA256 7F+6dSG3D3X3SSLXmb4GWWqUViztamLmmCBlYCi4a10=

 * SSH server
    gitolite@git.fripost.org:22
      MD5    0b:e5:47:44:71:cb:41:7d:1e:1b:25:bc:28:e8:c3:a2
      SHA256 zNZXfa/okPm/tV9dl3gNlizfXAghrMSgrcwICiWx+80

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iQIcBAEBCgAGBQJXhVs1AAoJENOaSZw8IaVSCAsP/0EJzDPotNq26QfGJHz29hiJ
MUP7Eh5D8dc+g7Ng2i3r1DlIVw/O/r8bTUCRTV0eA+lDvT59xYCXynV5JhIw5qKE
T393UfioFmxqtCy9Jgv64Qxn5VezUuYF1WwU9o6ea0hfAjRlIaDGAmYkeR7Ipeid
/NJhdncF/aSqm9cqY/xUQskmYhZ4M00zSBlkCqL3THO1uaz9E6GWqtDdIlPeaYdq
HlTCmcKuNu/j+Aa8ayov+qmte8Zhyfe2DvSw7gronwUICI9bi1WgICLZWvao3Cs5
w2Kgke+/yrfhKDj5Q0VTEoK5frh09mxn6rshfVQuOPgqmNZu1Rr5PNb60uVSWh63
Qn+nnXXIm8JkWIwgVYZfosHjuxjyPGSTMqaNieS7+CBVB7CV7I5p1V6nh4kAC4Y9
Tfpf3xqt/KVpv/2pDJo+BbrEg2gOo1D5T5UJ55RMGo0OnNttAtKiqoWq6ql/ed/6
zUp+Fk1Os5LbRzpnuPPkVTX3qFuEtV+z1XngYXHaNNoytdzhDWVKGBBm5/iGld36
AM+cV4q0s+l1ufrSf+baJ8gYHgHow+GPz3IXAmsdZ/8mN/mpmpPta4lTLzm4bZ7o
ILfCqdYZyS7b+nrT/ZvgwwL/eFEklmxDWZosBAXbezIMyOARHA9g9NOjr01iKY+5
5Cnm9XYP7aqdiuWKi2Jm
=rZpp
-----END PGP SIGNATURE-----