Why did the Macrumors homepage have a bad SSL certificate?!

[Michael MP2]

JUst the homepage... link to screenshots of downloaded certificate are below. I'm running Firefox 56 on 10.10 with some pretty heavy duty security on top. Certificate is fine here, homepage, no.

https://imgur.com/a/Enfhl

 

[triptolemus]

Why do you believe the cert is "bad"?

 

[loby]

Why do you believe the cert is "bad"?

I also get a message about that.....if I use a third party browser (iCab). It states inconsistencies in it’s cert “network error” and “can not establish a secure connection”....so it will not even open. Maybe due to all of the tracking and advertising MacRumors has...especially on its homepage.

They too have to pay the bills...

 

[arn]

I also get a message about that.....if I use a third party browser (iCab). It states inconsistencies in it’s cert “network error” and “can not establish a secure connection”....so it will not even open. Maybe due to all of the tracking and advertising MacRumors has...especially on its homepage.

They too have to pay the bills...

How old is iCab? It's possible that older browsers might not support the newest encryptions.

arn

 

[jtara]

No idea what OP means by "certificate is fine here, homepage no".

What is it that OP thinks is "wrong" with the certificate? It's a multi-domain certificate for a shared server or CDN.

 

[jtara]

Maybe related to this?

The certificate used to load https://forums.macrumors.com/thread...nauthenticated-sources.2093021/#post-25555811 uses an SSL certificate that will be distrusted in an upcoming release of Chrome. Once distrusted, users will be prevented from loading this resource. See https://g.co/chrome/symantecpkicerts for more information.

 

[loby]

How old is iCab? It's possible that older browsers might not support the newest encryptions.

arn

That may be a possibility, but the browser still receives updates so I can assume that it is update to date.

 

[Michael MP2]

Here we go, just then:
https://imgur.com/a/RJjgK
No mention of the certificate being for MR.

Further:
https://imgur.com/a/tYcyP

And:
https://imgur.com/a/2A3v5

And the certificate for the forums:
https://imgur.com/a/UScIo
[doublepost=1512464367][/doublepost]OK, I think there's an issue with GlobalSign Root CA, serial 04:00:00:00:00:01:15:4B:5A:C3:94.

Using Firefox. I changed the trust settings and Firefox warns me about loading the homepage, forums are fine.

 

[jtara]

No mention of the certificate being for MR.

It's right there on the third page that you posted.

*.macrumors.com

As my grandmother would have said: "If it was a snake, it would have bit you!"

Nothing to see here, move along!

It is a multi-domain (Subject Alternative Name) certificate. MacRumors uses the Fastly CDN.

See here:

https://docs.fastly.com/guides/deta...ervice-options#shared-tls-certificate-service