My domain is: ezproxy.gc.cuny.edu My web server is (include version): ezproxy The operating system my web server runs on is (include version): [sklein@ldv2 ~]$ cat /etc/os-release NAME="CentOS Linux" VERSION="7 (Core)" I can login to a root shell on my machine (yes or no, or I don't know): ye…

[image] gclibrarian: So my question is why does my SAML setup continue to work, although the IDP folks have metadata for the previous cert, the cert that existed before August? If you can confirm that the cert in use is expired, then I can only think that the service using that cert is not ch…

Thank you. Pre-Let's Encrypt days, when we were using digi-cert it seemed like we needed to renew before expiration so assuming it it checking for validity dates.

Looking at your cert history ( crt.sh | ezproxy.gc.cuny.edu ), it seems like your LE cert was automatically renewing just fine every 2 months (which is the advice from LE), until now. It should have renewed around 2023-08-21, but didn't. Unless crt.sh has a backlog of almost 2 weeks :roll_eyes: So so…

I think my sys admin would run the cron job ~30 days before expiration.

[image] Osiris: crt.sh Also, what is crt.sh and what might not be quite right? Could you translate this for me?

[image] gclibrarian: what is crt.sh It's a web site [https://crt.sh/] operated by Sectico . The site name is intended to be an abbreviation of "Certificate Search". You can use it to search for certificates issued by any CA.

[image] gclibrarian: what is crt.sh and what might not be quite right? @Osiris meant that crt.sh can sometimes be delayed about showing certs. But, that 2 week delay is, um, unlikely. However, I see your Aug21 cert using a different system ( censys.io ) so it looks like crt.sh is problematic.…

[image] MikeMcQ: Especially since your web server is using this Aug21 cert we know it is valid. Ah, didn't check that on my phone, nevermind my previous reply then :slight_smile:

Understanding 3 month cert

Help

petercooperjr September 5, 2023, 3:57pm 9

There is more information in this forum topic on the various Certificate Transparency systems people here are using to try to look up what certificates exist for that domain, if that's helpful:

Topic		Replies	Views
Certificate Expiration does not match Help	41	2640	November 4, 2019
Confusion over SSL cert expiry date Help	22	730	February 24, 2025
Encrypt certificate expiration Help	2	579	March 19, 2022
Cert Expired Renewed Cert Still Expired? Help	36	1462	March 9, 2024
Checking cert from different servers shows expired and current Help	2	682	March 21, 2022

Understanding 3 month cert

Related topics