Firefox & Safari showing traefik.me wildcard cert is revoked.
reddit / selfhosted

----------------------------------------------------------------------
geo38 · 2023-10-05 18:35

I've been using the wildcard certs from https://traefik.me for some
internal https services. This allows using DNS names like
192-168-100-3.traefik.me to access these internal services, and I
don't need to generate my own certs or have my own domain name.

But, today both Firefox and Safari are reporting a revoked certificate
on https://traefik.me.

Output from certigo:

    certigo connect traefik.me:443 --verify
    ** TLS Connection **
    Version: TLS 1.3
    Cipher Suite: AES_128_GCM_SHA256 cipher

    ** CERTIFICATE 1 **
    Valid: 2023-09-18 13:06 UTC to 2023-12-17 13:06 UTC
    Subject:
            CN=traefik.me
    Issuer:
            C=US, O=Let's Encrypt, CN=R3
    DNS Names:
            *.traefik.me, traefik.me

    ** CERTIFICATE 2 **
    Valid: 2020-09-04 00:00 UTC to 2025-09-15 16:00 UTC
    Subject:
            C=US, O=Let's Encrypt, CN=R3
    Issuer:
            C=US, O=Internet Security Research Group, CN=ISRG Root X1

    ** CERTIFICATE 3 **
    Valid: 2021-01-20 19:14 UTC to 2024-09-30 18:14 UTC
    Subject:
            C=US, O=Internet Security Research Group, CN=ISRG Root X1
    Issuer:
            O=Digital Signature Trust Co., CN=DST Root CA X3

    Failed to verify certificate chain:
            x509: “traefik.me” certificate is revoked

Does anyone know what happened?