Problem with site certificate

[Ray Parrish]

Corneil du Plessis wrote:
> On Tue, 2008-12-02 at 11:05 -0800, NoOp wrote:
>> On 12/02/2008 01:12 AM, Ray Parrish wrote:
>> > Hello,
>> > 
>> > I just tried to access my US Bank online account's Bill Pay page, and it 
>> > returns the following error message -
>> > 
>> > billpay.usbank.com uses an invalid security certificate.
>> > 
>> > The certificate is not trusted because it is self signed.
>> > The certificate is only valid for <a id="cert_domain_link" 
>> > title="localhost.localdomain">localhost.localdomain</a>
>> > (Error code: sec_error_untrusted_issuer)
>> > 
>> > I do not get the error on any of their other pages, and I went into 
>> > Firefox Preferences and tried to turn off checking for site 
>> > certificates, but this did not work.
>> > 
>> > Anybody have any clue what is going on here?
>> > 
>> > Thanks for any help you can be.
>> > 
>> > Later, Ray Parrish
>> > 
>>
>> ~$ host billpay.usbank.com
>> billpay.usbank.com is an alias for usbank41.checkfreeweb.com.
>> usbank41.checkfreeweb.com has address 91.203.92.63
>>
>> $ whois 91.203.92.63
>> [snip]
>> inetnum:        91.203.92.0 - 91.203.95.255
>> netname:        BASTION-NET
>> descr:          ISP UATelecom
>> country:        EU
>> [snip]
>> address:        Kiev, Ukraine
>> phone:          +380963801326
>> nic-hdl:        ML7676-RIPE
>> source:         RIPE # Filtered
>>
>> % Information related to '91.203.92.0/22AS44997'
>>
>> route:          91.203.92.0/22
>> descr:          BTG-AS
>> origin:         AS44997
>> mnt-by:         UATELECOM-MNT
>> remarks:        responsible: abuse at uatelecom.com.ua <mailto:abuse at uatelecom.com.ua>
>> source:         RIPE # Filtered
>>
>> Does US Bank do business with the Ukraine?
>>
>> ~$ host checkfreeweb.com
>> checkfreeweb.com has address 208.235.248.190
>> checkfreeweb.com mail is handled by 10 inbd-pstfx.customercenter.net.
>> checkfreeweb.com mail is handled by 20 inbd-pstfx.customercenter.net.
>>
>> 91.203.92.63 is a malware redirect & is currently down (as is
>> billpay.usbank.com). Notify your bank immediately.
>>
>>
>>
>>     
>
> If it walks like duck and sounds like a duck it is probably a duck! 
Hello again,

I wanted to try those commands Noop used in Terminal there [thanks for 
the tip by the way, didn't know I could do that from Terminal] and here 
are the results I am getting now. As you can see it is returning a 
different ip address for checkfreeweb.com this time, and is showing them 
to be in the U S now.

I suppose I could call their tech support number there, but it looks 
like they are already on it, and don't need to be bugged by me.

Later, Ray Parrish

ray at ray-desktop:~$ host billpay.usbank.com
billpay.usbank.com is an alias for usbank41.checkfreeweb.com.
usbank41.checkfreeweb.com has address 64.128.99.90
ray at ray-desktop:~$ whois 64.128.99.90

OrgName:    tw telecom holdings, inc.
OrgID:      TWTC
Address:    10475 Park Meadows Drive
City:       Littleton
StateProv:  CO
PostalCode: 80124
Country:    US

ReferralServer: rwhois://rwhois.twtelecom.net:4321

NetRange:   64.128.0.0 - 64.129.255.255
CIDR:       64.128.0.0/15
NetName:    TWTC-NETBLK-11
NetHandle:  NET-64-128-0-0-1
Parent:     NET-64-0-0-0-0
NetType:    Direct Allocation
NameServer: NS1.MILW.TWTELECOM.NET
NameServer: NS1.IPLT.TWTELECOM.NET
NameServer: NS1.ORNG.TWTELECOM.NET
Comment:   
RegDate:    2004-04-26
Updated:    2006-03-09

RTechHandle: ZT87-ARIN
RTechName:   IP Manager
RTechPhone:  +1-800-829-0420
RTechEmail:  ipmanager at twtelecom.net

OrgAbuseHandle: TWTAD-ARIN
OrgAbuseName:   tw telecom Abuse Desk
OrgAbusePhone:  +1-800-898-6473
OrgAbuseEmail:  abuse at twtelecom.net

OrgNOCHandle: TDN1-ARIN
OrgNOCName:   TWTC Data NOC
OrgNOCPhone:  +1-800-898-6473
OrgNOCEmail:  support at twtelecom.net

OrgTechHandle: NST12-ARIN
OrgTechName:   NOC SWIP Team
OrgTechPhone:  +1-800-898-6473
OrgTechEmail:  swip at twtelecom.com

# ARIN WHOIS database, last updated 2008-12-02 19:10
# Enter ? for additional hints on searching ARIN's WHOIS database.


Found a referral to rwhois.twtelecom.net:4321.

%rwhois V-1.5:0030B0:00 yumi.dnvr.twtelecom.net (rwhois_ngd v0.1.0 by 
James Sella)
%error 230 No objects found

-- 
http://www.rayslinks.com/ Web index of human reviewed links.
<http://www.rayslinks.com/Troubleshooting%20and%20fixing%20Windows.html>
Trouble shooting and Fixing Windows
http://www.writingsoftheschizophrenic.com My poetry in web pages