20

When trying to browse https://stackoverflow.com I receive an error that the certificate is not valid. The reason is that *.stackoverflow.com comes with a certificate for *.stackexchange.com at the moment.

More details:

SHA-1 fingerprint of the cert:

DD:BE:B5:C8:5C:F8:40:66:23:AE:1D:93:6B:FE:91:7D:B6:59:CA:54

Issued by: DigiCert High Assurance CA-3

  • Same problem: tried to reach stackoverflow.com but the server name is *.stackexchange.com on Chrome 33.0.1750.154 m, Windows Seven Enterprise – Nk SP Apr 8 '14 at 14:00
  • 4
    Well, they are in the process of re-issuing certificates after fixing a critical bug, guess this will go away by itself when the process will be done. :) – Shadow 10 Years Wizard Apr 8 '14 at 14:02
  • 4
    QUICK EVERYBODY EXPLOIT TH— oh. – BoltClock's a Unicorn Apr 8 '14 at 14:04
17

This is a race condition as we upgraded certs immediately but DNS took a bit to catch up. You should now be seeing a valid cert which we'll be updating again as soon as we receive a new combined wildcard for that particular certificate.

Most CAs are a bit busy today which is understandable.

| improve this answer | |
  • 2
    Why are they particularly busy today? – Duncan Jones Apr 8 '14 at 15:37
  • 8
    @Duncan In case that wasn't sarcasm here is a link to the reason CAs are busy today. – Matthew Green Apr 8 '14 at 15:42
  • 2
    @MatthewGreen It wasn't sarcasm, thanks for the link. – Duncan Jones Apr 8 '14 at 15:43
  • What about per-site-metas? I see the same warning when opening any of them directly using HTTPS. – asheeshr Apr 8 '14 at 16:56
  • @AsheeshR we do not support SSL on per-site metas and won't at their current URLs at all. Note: we don't link you to them over https:// either. – Nick Craver Apr 8 '14 at 16:57
  • The "sign in" link does point to https:// – ThiefMaster Apr 13 '14 at 18:15
  • @ThiefMaster The "sign in" link doesn't point to the child meta. It would (appropriately) throw an invalid cert warning in almost every browser if it did. – Nick Craver Apr 14 '14 at 3:35
  • I went to meta.arduino.stackexchange.com and clicked "sign up" (sorry, not "sign in"). I ended up in meta.arduino.stackexchange.com/users/… which does not have a valid certificate. – ThiefMaster Apr 14 '14 at 7:52
  • @ThiefMaster that's definitely a bug, it'll be fixed in the next build. – Nick Craver Apr 14 '14 at 10:20

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .