Expired SSL Certificate at GitHub

Not related but another GitHub issue today: <a href="https:&#x2F;&#x2F;github.blog&#x2F;2023-03-23-we-updated-our-rsa-ssh-host-key&#x2F;" rel="nofollow">https:&#x2F;&#x2F;github.blog&#x2F;2023-03-23-we-updated-our-rsa-ssh-host-k...</a> , <a href="https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=35285390" rel="nofollow">https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=35285390</a>

I built a free monitoring service some years ago if anyone doesn&#x27;t want to be the victim of this...<p><a href="https:&#x2F;&#x2F;ismycertexpired.com&#x2F;check?domain=objects.githubusercontent.com" rel="nofollow">https:&#x2F;&#x2F;ismycertexpired.com&#x2F;check?domain=objects.githubuserc...</a>

Guess this will never stop happening

Looks like they tried to rotate the cert, maybe due to the private key leak. But instead, they rolled the wrong expired key to all content domains.

They just posted this update on GitHub Status - related to GitHub Pages:<p><pre><code> We are aware of TLS problems related to an expired certificate in our CDN configuration. We are working to resolve this issue. </code></pre> See <a href="https:&#x2F;&#x2F;www.githubstatus.com&#x2F;incidents&#x2F;x7njwb481j9b" rel="nofollow">https:&#x2F;&#x2F;www.githubstatus.com&#x2F;incidents&#x2F;x7njwb481j9b</a>

Glad I&#x27;m not the only one.<p>Getting the same when trying to wget a release - says failed to verify certificate for objects.githubusercontent.com

How is it that literally nobody – whether deploying a hobby project or working at Microsoft or Google – has ever been able to figure out cert rotation? There&#x27;s a billion dollar company waiting to be built if someone can just ensure that all my TLS certs across all servers will stay up to date for all eternity.

They&#x27;re serving the wrong cert on pkg-containers.githubusercontent.com (it&#x27;s for *.githubassets.com) and their support site also expired 3&#x2F;21... <a href="https:&#x2F;&#x2F;support.github.com&#x2F;" rel="nofollow">https:&#x2F;&#x2F;support.github.com&#x2F;</a> What is going on over there?

I reported a expired certificate to DigitalOcean last week, it was for their package repository which meant apt-get would give warnings. These things happen. Was fixed in a hour.

same for raw.githubusercontent.com which is images, raw text files etc. certificte validity end date: Tue, 21 Mar 2023 23:59:59 GMT

They&#x27;re not having a great Friday.

Heh, just noticed this myself.

FIXED!

It&#x27;s better now.

maybe the certificate crew is laid off?

expired two days ago (3&#x2F;22&#x2F;2023) and no one cares