Comment by gregsadetsky

Is there a way to know that a web/https client is susceptible?

As in - could I connect to a site signed with those certificates and see that my browser/client accepted that certificate?

I assume these certificates have been pulled from most browsers - but - an un-updated curl or wget would still accept these, right?

EDIT: found https://emudhra.we-have-a-problem.com/ , scroll down to 'Does your client still trust the compromised intermediates?'

EDIT 2: a few tests you can also run...

    curl https://dv-g3b-emudhra.we-have-a-problem.com/

and in Python:

    import urllib.request;print(urllib.request.urlopen("https://dv-g3b-emudhra.we-have-a-problem.com/").read().decode())