3+ day, 23+ hour ago   (716+ words) Chrome stops a page and prints NET::ERR_CERT_COMMON_NAME_INVALID when the name written on a site’s SSL certificate does not match the address you asked for. Most cases trace back to the server. A smaller share come from your own device, a…...

1+ week, 5+ day ago   (1587+ words) Most developers use TLS constantly and understand it vaguely, "it's the padlock, it means encrypted," without a clear picture of what's actually happening or, more usefully, what actually breaks and why when a cert issue takes down production. Let me…...

2+ week, 2+ day ago   (877+ words) A Burp Suite certificate in Firefox is what lets the proxy read your HTTPS traffic without throwing security warnings on every page. Firefox keeps its own certificate store instead of using the operating system’s, so importing Burp’s CA certificate here…...

2+ week, 6+ day ago   (330+ words) Runbooks still say "renew the SSL certificate" when the browser warning is obsolete protocol. The certificate can be brand new. The tunnel is still TLS 1.0. This is a shortened English note. The tables, handshake diagram, and OpenSSL CLI checks live…...

2+ week, 6+ day ago   (727+ words) The certificate is real. It's signed by a genuine CA, it's nowhere near expiry, and the chain is complete. And the browser still slams the door: This is a different failure from the two it's most often confused with. It…...

2+ week, 6+ day ago   (461+ words) You open the site in a browser and the padlock is green. Then your app tries to call the same host and dies: Here is the reframing that makes the whole error make sense. A TLS server is supposed to…...