Site SSL Certificate Expired

[bluedanes]

When visiting https://makemkv.com it shows that the site certificate has expired 11 days ago thus most browsers are throwing up warnings about the website not being safe.

This is the message I receive in Brave

This server could not prove that it is makemkv.com; its security certificate expired 11 days ago. This may be caused by a misconfiguration or an attacker intercepting your connection. Your computer's clock is currently set to Tuesday, May 16, 2023. Does that look right? If not, you should correct your system's clock and then refresh this page.

[dcoke22]

My browser shows the cert as valid until August 4, 2023.

I would show a screen shot, but the board attachment quota has been reached.

[d00zah]

My browser shows the cert as valid until August 4, 2023.

I would show a screen shot, but the board attachment quota has been reached.

You're looking @ the cert (in FF) for https://www.makemkv.com/ which lists 'Common Name' as 'makemkv.com' & its 'Validity' as:

Not Before Sat, 06 May 2023 10:22:52 GMT
Not After Fri, 04 Aug 2023 10:22:51 GMT

Oddly(?), the cert for https://makemkv.com/ lists 'Common Name' as '2mkv.com' & its 'Validity' as:

Not Before Sun, 05 Feb 2023 00:14:32 GMT
Not After Sat, 06 May 2023 00:14:31 GMT

While I don't look closely often, I don't recall seeing 'monthly' certs? Just observations...

[dcoke22]

Ah, I do see the expired cert for https://makemkv.com

It looks like they're Let's Encrypt certs, which last for 90 days.

https://letsencrypt.org/docs/faq/

[Ezatoka]

I am not sure, how normal it is for a website to have different IP addresses

Code: Select all

Name:    makemkv.com
Address:  185.10.186.99

Name:    www.makemkv.com
Addresses:  2606:4700:3035::ac43:c3f4
          172.67.195.244

Seemingly the www one is behind cloudflare whereas without is on a russian host (according to ssllabs SSL Server Test)

[Mirarora]

if they are using letsencrypt i'm surprised they don't have a cron job running every 90 days to run certbot to auto renew the cert which would prevent this problem.

[bellboy]

The site's currently down, so that might be a contributing factor.

[jinx100]

Strangely, https://forum.makemkv.com/forum/ seems to still work to get to the forum but this won't help those using www.makemkv.com/forum/.