Hacker News Reader

Really? I'm getting serial number 0X043f60 (instead of 0x1599c5), validity starting on May 7 2015. Might that have to do with using Firefox or anything client-related? Or he switched it?

View on HN

I updated the server certificate to one signed with RSA+SHA256 to make chrome happy, but the new one has the same thing done to it.

Is the private key from the blog post valid to impersonate your server?

Depends on whether he revoked it or not.

The private key in the article was generated specifically for the article as an example - there's no CA-signed certificate that used it.

Also, certificate revocation is very unreliable.

Running the openssl s_client command from the article will show you live.

Reply on news.ycombinator.com