Hacker News Reader

Comment by freshpots | Hacker News Reader

Your connection is not private Attackers might be trying to steal your information from isgoogleanalyticsillegal.com (for example, passwords, messages or credit cards). Learn more NET::ERR_CERT_AUTHORITY_INVALID

No thanks.

View on HN

It's a Let's Encrypt certificate issued by R3, perhaps your root certs are not up to date?

In particular because of this issue:

https://letsencrypt.org/docs/dst-root-ca-x3-expiration-septe...

And this is why all that scary pages without explanation sucks. There is needed too many clicks to actually see the chain and certs.

Especially because you can get errors like that just from having an incorrect date/time set on the device. Confused me a few times.

Huh, it is working for me. It looks like a valid cert from Let's Encrypt to me. Do you have any more details? So maybe the author can fix it.

For me, the cert has a fingerprint of 8C:5A:9F:E3:03:A2:C5:31:0D:42:C0:AF:41:E6:61:48:8A:C4:EF:91:CD:41:83:90:D1:86:AF:DA:47:47:00:16 signed by 67:AD:D1:16:6B:02:0A:E6:1B:8F:5F:C9:68:13:C0:4C:2A:A5:89:96:07:96:86:55:72:A3:C7:E7:37:61:3D:FD signed by 96:BC:EC:06:26:49:76:F3:74:60:77:9A:CF:28:C5:A7:CF:E8:A3:C0:AA:E1:1A:8F:FC:EE:05:C0:BD:DF:08:C6 and gets accepted.

In my case, this was caused by a corporate "keep our internet clean" (lol) install of Cisco. Check what the cert actually is.

LGTM, sure you're not having an issue on your side? I even see http redirect to https. Cert was also issued yesterday.

Reply on news.ycombinator.com