website https://www.blevesearch.com is messy due to invalid(?) ssl cert
iredmail opened this issue · comments
Just visit https://www.blevesearch.com and you should understand what i mean. :)
Is ssl cert for www.blevesearch.com (NOT "blevesearch.com") invalid now?
You're expected to go to https://www.blevesearch.com.
I see the expected page.
I can confirm that I'm seeing similar issue as @iredmail, I've actually been seeing it for a few weeks and keep forgetting to open an issue.
Steps to reproduce:
OS: Ubuntu 22:04
Browser: Firefox 115
- Enter www.blevesearch.com in browser bar and hit enter.
- Observe
- 301 redirect to blevesearch.com
- Unformatted HTML Presented
- Asset requests blocked with
SSL_ERROR_BAD_CERT_DOMAIN
- Enter https://www.blevesearch.com in browser and hit enter.
- Observe
- Browser security warning
- Certificate supplied appears to be for a github.com domain.
I get something similar in Safari on iOS:
Believe we've addressed it now.
https://blevesearch.com should work now and https://www.blevesearch.com should redirect to https://blevesearch.com.
✔️ https://blevesearch.com works.
✔️ http://blevesearch.com works (shows 'connection is not secure' in toolbar)
✔️ http://www.blevesearch.com works, redirects to http://blevesearch.com (see above)
❌ https://www.blevesearch.com does not work, it presents the security risk warnings notably:
The certificate is only valid for the following names: *.github.io, github.io, *.github.com, github.com, www.github.com, *.githubusercontent.com, githubusercontent.com
Not sure if that last redirect is worth fixing since the site is back up on the others (thanks for that!). Just wanted to follow up with my results.