Netlify SSL certificate stopped working

I'm hosting my website on Netlify. (https://spikes.studio).
for some reason , couple of hours ago , alot of users are getting errors and can't access the site do to cert problems saying it's not secure.

Trying to renew the certificate via Netlify but the request didn't seem to go through.
what can be done? is anyone else facing this issue?

Hello @gadiplaystreamgg, welcome to the Let's Encrypt community. :slightly_smiling_face:

Can you give more details on the problems?

Site Certificate looks good from here:
https://www.ssllabs.com/ssltest/analyze.html?d=spikes.studio

1 Like

I am not have any issue with Windows 10 with Firefox 116.0.3 (64-bit) nor Chrome Version 116.0.5845.111 (Official Build) (64-bit).

1 Like

It might be a Netlify issue.
here's the error from the browser
The certificate is only valid for the following names: *.netlify.app, netlify.app

Error code: SSL_ERROR_BAD_CERT_DOMAIN

seems like the certificate's DNS name is set to *.netlify.app

thanks for your replay
some users are able to access the site and some (like myself) not so much :slight_smile:

1 Like

As a datapoint: firefox, brave, curl and openssl s_client -connect spikes.studio:443 -servername spikes.studio -alpn h2 -tlsextdebug -status </dev/null all see a netlify.app, *.netlify.app certificate on my end.

2 Likes

not sure what this means.
The certificate DNS should point to my website right? (spikes.studio)

Seems to be a netlify issue, I would suggest contacting its support.

1 Like

And not seeing any issues here:

1 Like

maybe the certificate is ok but it's a DNS issue on netlify?

If so @Nekit suggestion still applies.

Using connection from my work: everything seems to be fine, very peculiar.

2 Likes

some people reports that everything is ok and some not so much.

is there's a way to renew the certificate directly from here without Netlify as the middle man?

It looks like the netify.app cert is the "default" cert that's provided when a client doesn't specify a server name. Thus, as the ssllabs.com report states, this site will only work with clients that support SNI--which should be any halfway-modern browser.

4 Likes

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. crt.sh | example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is: spikes.studio

I ran this command:

It produced this output:

My web server is (include version):

The operating system my web server runs on is (include version):

My hosting provider, if applicable, is:

I can login to a root shell on my machine (yes or no, or I don't know):

I'm using a control panel to manage my site (no, or provide the name and version of the control panel):

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot):

Thank you for assisting us in helping YOU!

1 Like

Netlify Just resolved the issue : Netlify Status - Errors with serving some SSL certificates
Thanks everyone for you help.

I've never seen such an amazing community support before in all my 20+ years of coding :slight_smile:
Cheers! much appriciated!

6 Likes

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.