Since some days and only using Chrome (version 125.0.6422.113 (Official Build 64 bit) I cannot browse anymore perlmonks.org (nor www. .com .net etc.) because of the following weird error: NET::ERR_CERT_INVALID and inspecting the certificate I see the certificate presented is: css.perlmonks.com Common Name: <empty> issued by: Common Name: GTB Technologies, Inc (46115)
If I inspect it with openssl.exe (I'm on windows but I dont lean out of it.. :) and grep I see valid certs only:
openssl s_client -showcerts -servername 66.39.54.27 -connect css.perl +monks.org:443 2>/nul | grep CN i:/C=GB/ST=Greater Manchester/L=Salford/O=Sectigo Limited/CN=Sectig +o RSA Domain Validation Secure Server CA 1 s:/C=GB/ST=Greater Manchester/L=Salford/O=Sectigo Limited/CN=Sectig +o RSA Domain Validation Secure Server CA i:/C=US/ST=New Jersey/L=Jersey City/O=The USERTRUST Network/CN=USER +Trust RSA Certification Authority issuer=/C=GB/ST=Greater Manchester/L=Salford/O=Sectigo Limited/CN=Sect +igo RSA Domain Validation Secure Server CA ^C^C
without grepping the output I notice: Verify return code: 20 (unable to get local issuer certificate) but that shoud not be an issue.
The same happens with openssl .... -servername 216.92.34.251 ... (the other IP).
I cleaned the site's data and all data from all website stored in Chrome (not cleared cookies tho) and reboot happened in the meanwhile.
If I export the certificates I can also see right SAN (Subject Alternative Names):
openssl x509 -text -in css.perlmonks.com_TEST.crt Certificate: Data: Version: 3 (0x2) Serial Number: 82:1f:b9:20:57:2d:8f:be Signature Algorithm: sha256WithRSAEncryption Issuer: C = US, CN = "GTB Technologies, Inc (46115)" Validity Not Before: Sep 19 00:00:00 2023 GMT Not After : Oct 19 23:59:59 2024 GMT Subject: Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:c3:bb:b5:af:fa:d2:a4:b2:e0:7c:36:e5:48:65: bf:a3:de:41:34:79:79:c8:99:9a:9e:3f:33:66:24: ae:a3:62:2d:10:0a:ab:55:ff:e8:b8:1d:ef:2e:f7: 53:8a:ae:eb:0c:32:2e:a4:84:f1:6c:a4:77:23:9f: aa:58:d0:d5:15:72:1d:f5:8d:d4:b4:9f:4b:4b:69: cb:86:d7:d4:0d:11:9c:39:66:0b:7f:a2:52:d1:af: 57:a3:54:5b:4f:d5:8d:93:fc:60:4c:a1:36:bd:07: 36:b3:1d:ca:61:16:5d:1b:0d:80:40:d1:ee:b6:55: 4c:d4:52:c2:c1:39:9b:9f:71:3f:dd:11:fa:5f:b9: 36:a4:84:84:d9:9a:6c:fb:a8:f5:ad:a9:2e:b6:f1: 8b:bc:34:7e:0c:5f:85:73:9f:76:ed:f6:35:f1:11: 8f:f3:5d:38:e5:36:86:c2:09:a3:c3:1e:a0:e8:7b: 2d:00:fa:4c:2f:76:e4:47:7a:d6:c2:28:fc:05:75: 27:c3:56:88:6f:a1:23:7b:5e:da:c1:b1:a8:06:6f: 31:26:3e:2c:d0:18:1e:af:19:ca:94:fe:75:f3:bb: ba:c0:b0:c1:8c:ce:93:82:99:8c:67:20:1e:ca:72: 1d:b9:7c:93:eb:e7:97:46:c6:31:34:49:0a:3e:ac: af:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Alternative Name: DNS:css.perlmonks.com, DNS:css.perlmonks.net, DNS:css. +perlmonks.org, DNS:perlmonks.com, DNS:perlmonks.net, DNS:perlmonks.or +g, DNS:www.perlmonks.com, DNS:www.perlmonks.net, DNS:www.perlmonks.or +g X509v3 Key Usage: Digital Signature, Key Encipherment X509v3 Extended Key Usage: TLS Web Server Authentication, TLS Web Client Authenti +cation Signature Algorithm: sha256WithRSAEncryption 53:8e:f2:d6:cf:e8:e5:85:7d:6f:88:0d:66:82:c2:63:9f:0f: 18:7e:0f:f2:db:c2:15:60:79:ce:a7:07:7d:6f:6d:7c:2e:83: f4:31:cf:4b:ba:49:18:e1:46:af:fc:a5:a8:12:24:55:73:44: 16:ab:e0:eb:8d:4f:32:81:f2:00:ce:40:c4:59:ab:a3:84:6e: 61:2f:41:5b:4e:51:33:bf:6a:f2:d5:37:0e:b0:e3:1a:e2:10: f9:07:3c:d0:17:86:48:ab:6f:8f:33:2c:2f:35:fe:09:68:92: 18:bf:a5:b7:70:28:5b:3a:d6:cf:c1:e3:25:2b:17:6b:16:ce: 89:ef:1c:1f:be:c7:e8:15:62:a3:88:23:35:2a:1b:00:49:bb: 41:70:0f:fe:11:c5:c4:20:9f:b6:ae:a4:28:3f:a1:7c:cc:6e: 74:59:1b:21:d3:99:79:ae:9d:ef:36:a5:e1:bb:32:3c:38:54: c8:de:39:0a:d0:4c:86:dd:79:20:00:44:f4:5b:6d:ca:df:3b: 07:7c:3d:68:9e:ff:b4:f6:2c:64:ae:76:16:16:94:93:2c:6a: 7a:91:54:f6:ca:29:cd:6f:b4:e5:1c:6b:04:2f:86:58:00:07: 62:98:13:e7:7e:47:bf:19:f1:41:a5:21:7e:16:8d:0f:f4:56: 91:4f:9e:86 -----BEGIN CERTIFICATE----- MIIDlTCCAn2gAwIBAgIJAIIfuSBXLY++MA0GCSqGSIb3DQEBCwUAMDUxCzAJBgNV BAYTAlVTMSYwJAYDVQQDDB1HVEIgVGVjaG5vbG9naWVzLCBJbmMgKDQ2MTE1KTAe Fw0yMzA5MTkwMDAwMDBaFw0yNDEwMTkyMzU5NTlaMAAwggEiMA0GCSqGSIb3DQEB AQUAA4IBDwAwggEKAoIBAQDDu7Wv+tKksuB8NuVIZb+j3kE0eXnImZqePzNmJK6j Yi0QCqtV/+i4He8u91OKrusMMi6khPFspHcjn6pY0NUVch31jdS0n0tLacuG19QN EZw5Zgt/olLRr1ejVFtP1Y2T/GBMoTa9BzazHcphFl0bDYBA0e62VUzUUsLBOZuf cT/dEfpfuTakhITZmmz7qPWtqS628Yu8NH4MX4Vzn3bt9jXxEY/zXTjlNobCCaPD HqDoey0A+kwvduRHetbCKPwFdSfDVohvoSN7XtrBsagGbzEmPizQGB6vGcqU/nXz u7rAsMGMzpOCmYxnIB7Kch25fJPr55dGxjE0SQo+rK+tAgMBAAGjgdwwgdkwgaoG A1UdEQSBojCBn4IRY3NzLnBlcmxtb25rcy5jb22CEWNzcy5wZXJsbW9ua3MubmV0 ghFjc3MucGVybG1vbmtzLm9yZ4INcGVybG1vbmtzLmNvbYINcGVybG1vbmtzLm5l dIINcGVybG1vbmtzLm9yZ4IRd3d3LnBlcmxtb25rcy5jb22CEXd3dy5wZXJsbW9u a3MubmV0ghF3d3cucGVybG1vbmtzLm9yZzALBgNVHQ8EBAMCBaAwHQYDVR0lBBYw FAYIKwYBBQUHAwEGCCsGAQUFBwMCMA0GCSqGSIb3DQEBCwUAA4IBAQBTjvLWz+jl hX1viA1mgsJjnw8Yfg/y28IVYHnOpwd9b218LoP0Mc9LukkY4Uav/KWoEiRVc0QW q+DrjU8ygfIAzkDEWaujhG5hL0FbTlEzv2ry1TcOsOMa4hD5BzzQF4ZIq2+PMywv Nf4JaJIYv6W3cChbOtbPweMlKxdrFs6J7xwfvsfoFWKjiCM1KhsASbtBcA/+EcXE IJ+2rqQoP6F8zG50WRsh05l5rp3vNqXhuzI8OFTI3jkK0EyG3XkgAET0W23K3zsH fD1onv+09ixkrnYWFpSTLGp6kVT2yinNb7TlHGsEL4ZYAAdimBPnfke/GfFBpSF+ Fo0P9FaRT56G -----END CERTIFICATE-----
...but with this strange issuer: Issuer: C = US, CN = "GTB Technologies, Inc (46115)" it does it means I'm under a transparent device masking my request? If so why not with Firefox? Just for your info and in the hope these are useful informations.
L*
|
---|
Replies are listed 'Best First'. | |
---|---|
Re: weird certificate behaviour browsing perlmonks.org with chrome
by Corion (Patriarch) on May 30, 2024 at 14:44 UTC | |
Re: weird certificate behaviour browsing perlmonks.org with chrome
by hippo (Archbishop) on May 30, 2024 at 13:59 UTC | |
Re: weird certificate behaviour browsing perlmonks.org with chrome
by marto (Cardinal) on May 30, 2024 at 13:19 UTC |