3 ms·

Ironically this site gives me an SSL warning about an unknown certificate issuer.

• tantalor 14y ago
  What browser are you using? No issue for me in Chrome.
  • pjungwir 14y ago
    Firefox 14.0.1 on Ubuntu 12.04.
    • deleted 14y ago
      [deleted]
    • pjungwir 14y ago
      You can run this to get details about the certificate chain: $ SITE=en.greatfire.org $ echo "HEAD / HTTP/1.0\n Host: $SITE:443\n\n EOT\n" | openssl s_client -prexit -connect $SITE:443 I'm not sure how to interpret the results, but I'd be thrilled if someone more knowledgeable would comment. I see there is this chain of certs: Certificate chain 0 s:/OU=Domain Control Validated/OU=PositiveSSL/CN=greatfire.org i:/C=GB/ST=Greater Manchester/L=Salford/O=COMODO CA Limited/CN=PositiveSSL CA 2 1 s:/C=SE/O=AddTrust AB/OU=AddTrust External TTP Network/CN=AddTrust External CA Root i:/C=SE/O=AddTrust AB/OU=AddTrust External TTP Network/CN=AddTrust External CA Root 2 s:/C=GB/ST=Greater Manchester/L=Salford/O=COMODO CA Limited/CN=PositiveSSL CA 2 i:/C=SE/O=AddTrust AB/OU=AddTrust External TTP Network/CN=AddTrust External CA Root and openssl seems to complain about a self-signed certificate: Verify return code: 19 (self signed certificate in certificate chain)
      • tantalor 14y ago
        How do you tell whether it's self signed? There are two certificates so maybe one is not self signed?