>Anyway, it is embarassing to see certificate renewal is not automated - it's something any good sysadmin would have set up. From the original article[1]: "One

>Anyway, it is embarassing to see certificate renewal is not automated - it's something any good sysadmin would have set up. From the original article[1]: "One such example is https://ows2.usdoj.gov https://ows2.usdoj.gov, a U.S. Department of Justice website which uses a certificate that expired in the week leading up the shutdown. The certificate has been signed by a trusted certificate authority, GoDaddy, but it has not been renewed since it expired on 17 December 2018." It was probably already renewed, there's just no sysadmin to import the fresh cert. =] [1] - https://news.netcraft.com/archives/2019/01/10/gov-security-falters-during-u-s-shutdown.html https://news.netcraft.com/archives/2019/01/10/gov-security-f...