The Wiert Corner – irregular stream of stuff

Jeroen W. Pluimers on .NET, C#, Delphi, databases, and personal interests

  • My badges

    Mastodon

  • Twitter Updates

  • My Flickr Stream

    20140508-Delphi-2007--Project-Options--Cannot-Edit-Application-Title-HelpFile-Icon-Theming20140430-Fiddler-Filter-Actions-Button-Run-Filterset-now20140424-VMware-Fusion-6.0.3.-no-reclaimable
    More Photos

  • Pages

  • All categories

  • Enter your email address to subscribe to this blog and receive notifications of new posts by email.

    Join 1,860 other subscribers
«
»

Note the Ziggo Wifispots certificate will often not install on Android the default way

Posted by jpluimers on 2024/01/26

A long time ago, I wrote about Wifispots instellen | Klantenservice | Ziggo « The Wiert Corner – irregular stream of stuff.

For that, you need a Ziggo VPN certificate, which you can download from [Wayback] www.ziggo.nl/content/dam/www.ziggo.nl/tools/WifiSpots certificaten/WifiSpots certificaat Android en Windows Ziggo.crt .

On many Android phones, that does not install the default way any more as back then.

The reason is that it is a CA root certificate (in this case identifying Ziggo as certificate authority) thereby allowing them to issue any certificate. This can be a serious risk, so you have to be really sure to trust them before installing the certificate.

So you have to manually install if from your settings instead of the default “open and install” behaviour of other certificates:

  • [Wayback/Archive] Can’t install CA certificate on Android 11 – Stack Overflow

    Can’t install CA certificates
    CA certificates can put your privacy at risk and must be installed in Settings.
    with this workaround:
    In Android 11, to install a CA certificate, users need to manually:
    1. Open Device settings
    2. Go to ‘Security’
    3. Go to ‘Encryption & Credentials’
    4. Go to ‘Install from storage’ or ‘Install a certificate’ (depend on devices)
    5. Select ‘CA Certificate’ from the list of types available
    6. Accept a warning alert.
    7. Browse to the certificate file on the device and open it
    8. Confirm the certificate install

I had some hard time to find the right query to get me an online binary DER certificate decoder (the .CRT extension give you the impression it is in PEM text format, but that is deceptive).

Finally this query helped me [Wayback/Archive] online binary “der” decoder – Google Search:

This is the decoded certificate [Archive] https://lapo.it/asn1js/#MIIFZ…EMXvA

screenshot of https://lapo.it/asn1js/#MIIFZTCCA02gAwIBAgIQMRRC4yx40plHb1I51cU4BDANBgkqhkiG9w0BAQsFADBFMRMwEQYDVQQKEwpaaWdnbyBCLlYuMQswCQYDVQQGEwJOTDEhMB8GA1UEAxMYWmlnZ28gUHVibGljIFJvb3RDQSAtIEcxMB4XDTE0MDYyNjEyMzYxOFoXDTM0MDYyNjEyMzYxOFowRTETMBEGA1UEChMKWmlnZ28gQi5WLjELMAkGA1UEBhMCTkwxITAfBgNVBAMTGFppZ2dvIFB1YmxpYyBSb290Q0EgLSBHMTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAL7u99oSjtFHKcjs3NFNiojGDyjcTIYmowMkKPFRWD-QjBA8t1Gkddc0CpsEvbdzLY6oArJYmmMTayMXeOp1wdXfGKBgvnWieehNH39vzBlQjby09U_iKm0O2pMzwK6XocpOh6Dy3vxnyv_XdTkuL6WU2KuhYLOZ8VWX8AmbUN5hKnEr6bwAsTvj6afOloMFPxynFHdiKYr3E75rGUC5K3u-H7dbJyWbbCUmaBT_GAkMPhj62uPicWIxfNVI3ER1cKwvfMUULYNuJ6g2GNEs1yImrZ6ktVAMMogF1dGHomR_kuAAz73H09pCx4IxzxRCWCKEfQydkRwPz-4M3aIRG71OW1DhZM4pS8uyrmKzBZDDhDwSIB_2aGA0hphUf3-3MJNntqjdCWd0LOkRdbcDj2rNSlA2pE3-XbYrKGl8f6q_5RVfUmQhgkBex8whRCBg8OroCvKM5AC5hSz-IkXPGcg9quMd97YOaUdX8MqBJutVMhMqXemhh_3CzDMFnrLRk3uEMf6kDPPO-7UKxbl7dhh_I9Ym9lmuq3NM6EK0rdMXoy49ALyE-qvyhCvjchVyX1DgA_l4Flx4Vxlopo-m6hC1XKtI437bc97-8MxM_cKcTMe5qyq5akhVpqRTmnDNDEdaZ74ZUYLbamKCsjuKSrON8jQcn3bQBX9D2JgBaFhHAgMBAAGjUTBPMAsGA1UdDwQEAwIBhjAPBgNVHRMBAf8EBTADAQH_MB0GA1UdDgQWBBT_e2d1lo6L4HHujKQ4wNmm5H1AaTAQBgkrBgEEAYI3FQEEAwIBADANBgkqhkiG9w0BAQsFAAOCAgEANwRp4Q4tFtb2Z3hRnWnj21eEbigt3UmsEbCXFD-SdJMpF-DTK8waIkken2Ws3WfsxJLUSgAlsk7k_4TEpWLfXLvAc0_BgLQKjtnJ3517Pb7AyQnLJTX_njJ-uAO7gRurR3Fmwp-EQ0jMhhSfjXHcfTNKEhH7nH2ghDV3dKxE4Gs2ETfkaQQH7H9IOCLjUGWz1cLYgmvJECN1wFwCZP3wIlxWW5x4_uctw_7kdeMp239tkB6UNDvE5PXsUVKaG94BPYZV0dWREGsZrtKb4qrfMmraz7yCZWhDC_BzfSomNKuRqqyCOZv4jfatvGvP4EexCVfIn0-QetTUmu0zNOV9FzbPxglYUqdat4tCOh8MYTi8KVBbwibXTT9ifimTx0rses20pq0ixHPWPj8M97FDhMRGCM7SYCrXGScrPPlQEIKLsVMUC5nsRUp_BLMVIQ0yDElOULefbP9vSNugKnethslNWi4vKc0OokhLrad7ymq3RyVrge1adIghxTv-eoKnBFYgenafPNEvurr-jHLquTiP4nqEmQxWbXL3Nzeve6mABm13owHN09r0QvCKsI1paz0iBjzfIy7qrTZeD1Q4zPTN0dR93ENugauWgL5B8L8-UfED7W0Hr3SUD6YaIGzrDf8Qv02XcHQX5Bt3e-UbmYR1IR0QSsERn8DA4kEMXvA

–jeroen

This entry was posted on 2024/01/26 at 12:00 and is filed under Android Devices, Internet, ISP, Power User, Ziggo/UPC/A2000. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.

Leave a comment

This site uses Akismet to reduce spam. Learn how your comment data is processed.

«
»