Invalid certificate

I got notified that a certificate for my domain (cloudsrv.ca) was issued by you to someone other than me. Please invalidate this cert and block any other attempts to issue one. Cloudflare is the only issuer that I use.

Cloudflare has observed issuance of the following certificate for cloudsrv.ca or one of its subdomains:

Log date: 2022-12-30 02:43:43 UTC
Issuer: CN=E1,O=Let's Encrypt,C=US
Validity: 2022-12-30 01:43:43 UTC - 2023-03-30 01:43:42 UTC
DNS Names: *.cloudsrv.ca, cloudsrv.ca

Your DNS is operated by Cloudflare. Cloudflare is known to issue certificates from Let's Encrypt for their customers. Although it's kinda weird for them to do so if you don't actually use the Cloudflare CDN, but only their DNS (as your current IP address seems to be a "Bell Canada" owned IP address, not Cloudflare).

You could also ask Cloudflare if they've issued a certificate for your domain. Otherwise you could mail cert-prob-reports@letsencrypt.org with your request for revocation, as stated in the ISRG Certification Practice Statement.

5 Likes

It looks like cloudflare obtained that cert on your behalf. Let's encrypt is one of their providers. When you proxy your DNS with them they will do that

6 Likes

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.