Hacker News Reader

Comment by kgdinesh | Hacker News Reader

Anyone else getting a "Untrusted SSL Server Certificate" on the page?

If most other people were seeing it, someone would have diagnosed it by now.

Untrusted why? Dig into the browser's cert details to find out. In Chrome devtools (ctrl+shift+i), select the security tab.

The other person who mentioned an SSL error said chrome said untrusted authority. It's a cloudflare-issued cert, dated Tuesday 00:00, so there shouldn't be any issues unless you've disabled the Baltimore Cybertrust root which backs cloudflare's intermediate cert. Or unless there was a transient error with the cert cloudflare was serving. Like maybe they were serving a bad cert, but only at one of their POPs? While theoretically possible, it doesn't make sense that they'd have any untrusted certs around anywhere.

    depth=2 C = IE, O = Baltimore, OU = CyberTrust, CN = Baltimore CyberTrust Root verify return:1
    depth=1 C = US, ST = CA, L = San Francisco, O = "CloudFlare, Inc.", CN = CloudFlare Inc ECC CA-2 verify return:1

OP here. What browser/OS do you use? Our blog is run on Ghost so we don't actually control the TLS cert used, but we can try to find the cause of why it's not trusted and fix it.

Hi! John from Ghost here, had a quick look and can't see any issues on this side with the cert. It's a relatively new certificate, though, so there could be an old cache on an edge node somewhere which just hasn't fully updated yet.

I suspect this is a one-off, but please do reach out to us if you still have issues, I've already passed this along to the team to fast-track support if you do send us an email.

Reply on news.ycombinator.com