3 ms·

The SSL cert chain is broken for me.

• lgierth 10y ago
  What client and error? Works here and ssllabs.com has always turned up good results. Maybe it's the fact it's (still) a StartSSL cert?
  • wyldfire 10y ago
    Yes, that's probably it. [1] [1] https://blog.mozilla.org/security/2016/10/24/distrusting-new-wosign-and-startcom-certificates/ https://blog.mozilla.org/security/2016/10/24/distrusting-new...
• iRobbery 10y ago
  startcom CA, i've noticed this seems broken more often. Maybe not included in all CA-Cert collections for some operating systems.
  • dspillett 10y ago
    startcom and wosign (startcom is now owned by wosign) certificates signed after a certain date are not trusted by some browsers by default due to the back-dating issue last year. Because of the same trust issues some organisations have their OS and browser installations configured to not trust any certificate signed by startcom or wosign (or a certificate that chains to one of theirs).
    • Kubuxu 10y ago
      Gentoo is one of distributions that distrusted startcom and wosign certs completely not following any depreciation paths.
• Kubuxu 10y ago
  We wanted to switch long time ago to Let's Encrypt, unfortunately it isn't that simple when you have 10ths of domains and subdomains, distributed among 5-10 servers.
• dodgedcactii 10y ago
  Nope.