[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Handle-info] Invalid TLS certificate on hdl.handle.net

On Mon, Nov 27, 2023 at 5:36 PM Stanley Weilnau
<sweilnau@cnri.reston.va.us> wrote:
>
> I am puzzled.  I checked with GoDaddy.com about the certificate.  The checkers they showed me have it still valid.  We are working on an updated certificate at this time.

The current certificate is only valid until Dec 14 07:06:15 2023 GMT,
so maybe someone ordered a new one and revoked the current one.  As
far as I can tell, it shows up in Godaddy's revokation list already:

<pre>
$ openssl x509 -noout -text -in hdl.handle.net.crt | fgrep crl
                  URI:http://crl.godaddy.com/gdig2s1-4758.crl
$ openssl x509 -noout -serial -in hdl.handle.net.crt
serial=BAB2A135B54649F2
$ openssl crl -inform DER -text -noout -in gdig2s1-4758.crl | fgrep -A
4 BAB2A135B54649F2
    Serial Number: BAB2A135B54649F2
        Revocation Date: Nov 23 03:40:59 2023 GMT
        CRL entry extensions:
            X509v3 CRL Reason Code:
                Superseded
</pre>

regards, Gerhard Gonter
_______________________________________________
Handle-Info mailing list
Handle-Info@cnri.reston.va.us
http://www.handle.net/mailman/listinfo/handle-info