6 ms·
Kind of ironic that their website is using an invalid security certificate?
by thejoeflow 8y ago
Kind of ironic that their website is using an invalid security certificate?
- int0x80 8y agoIt looks pretty valid to my browers (chrome/firefox)?
- tialaramex 8y agoThe site is currently presenting a Let's Encrypt certificate issued just under 24 hours ago. There have historically always (for reasonable definitions of always) been valid certs for this site, although of course I can't tell from here that they were always properly installed. Likely explanations for your experience: 1. Your clock is wrong. If your system currently thinks this is Thursday 11 October for example, that's a problem, 'cos this is Friday 12 October. 2. There's some subtle configuration error on their server (seems unlikely as it looks to be just a generic AWS setup) that results in the wrong certificate being presented. 3. Your OS or browser trust store lacks the root CA "DST Root CA X3" operated by IdenTrust. If you didn't deliberately choose to do this, you should investigate as most likely you aren't getting important security updates. All three causes can often by diagnosed by closely examining the detailed error reported in a browser e.g. SEC_ERROR_EXPIRED_CERTIFICATE
- y4mi 8y agohttps://news.ycombinator.com/item?id=18201211 https://news.ycombinator.com/item?id=18201211 it mightve been invalid while he set up his cdn / reverse proxy?