0

I've found a strange certificate in osx keychain.

I don't remember installing it and it is marked as "it was signed by an unknown authority".

It was installed in my login keychain and it "seems" to be related to Akamai, but it doesn't seems to be correctly signed at least...

enter image description here

enter image description here

Is it possible to have it installed by error? As it wasn't set to "always trust", can have it been used by applications without showing an error? Is there anyway to see its installation date?

2
  • If you do not trust the CA, you should remove the cert.
    – sandyp
    Aug 8, 2016 at 1:14
  • I've marked it not to trust it never...
    – zapico
    Aug 8, 2016 at 6:06

2 Answers 2

1

For what it's worth, there appears to be a legitimate internal Akamai CA by this name — i can't know if yours is real, or a fraudulent impersonation — used by employees to sign emails. See, for example:

(If the CA is only intended for internal use and not publicly trusted, the employees probably only used it on public emails by mistake.)

I don't know if this happens, but it wouldn't surprise me if you received a signed email from some mailing list, and your email client automatically saved the CA.

Such a CA also shows up in Censys, though this doesn't really answer any questions:

1
  • Thanks for your answer! At least I can think of a legit use and not an attack. Is there anyway to check if this certificate is really from akamai?
    – zapico
    Aug 8, 2016 at 6:05
1

It is possible that some software that you might have gotten from the torrents or another pirated source installed that certificate onto your computer. It is not impossible since you would be providing your root password during installations.

Yes, it is possible that you installed it unknowingly. But no, without having "always trust" set, it would ask you for authorisation every time, or so it should!

I doubt it is possible to figure out when the cert was installed.

2
  • Thanks! I've been searching in google and it seems to appear in several p7s files...
    – zapico
    Aug 7, 2016 at 23:28
  • @zapico, Ah, I see. Though p7s is an Outlook related format as far as I know. Aug 7, 2016 at 23:30

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.