bootstrapCDN certificates are showing as not valid

[dblackw]

bootstrapCDN certificates are showing as not valid

[jimaek]

1. What URL are you hitting?
2. Ping it and tell me the IP address
3. Make sure you have updated your browser and there is no MITM proxies being used

The correct cert is issued by Cloudflare Inc ECC CA-3. So we need to see what exactly you are hitting and why

[dblackw]

using this on our corporate website : https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js

ping results: ping maxcdn.bootstrapcdn.com

Pinging cds.j3z9t3p6.hwcdn.net [209.197.3.15] with 32 bytes of data:
Reply from 209.197.3.15: bytes=32 time=33ms TTL=59
Reply from 209.197.3.15: bytes=32 time=33ms TTL=59
Reply from 209.197.3.15: bytes=32 time=33ms TTL=59
Reply from 209.197.3.15: bytes=32 time=33ms TTL=59

Ping statistics for 209.197.3.15:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 33ms, Maximum = 33ms, Average = 33ms

[jordan-thoms]

Also seeing issues with https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/js/bootstrap.min.js

It's a bit odd though - I connected to a VPN, and it started working, then after disconnecting it has continued working. I wonder if there are some CDN nodes out there still serving the old certificate? I didn't catch the ip sending the bad certificate before the problem came right but I'll record it if I see this again

[ximsce]

Can confirm I'm seeing the https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/js/bootstrap.min.js expired cert on cashortrade.org's website. I'm guessing it's a bad node, because I went across town and it magically started working again.

[jimaek]

Its not a bad node, its bad DNS on the user side. For everyone having this issue:

1. Check your hosts file and make sure there are no manually created records
2. Change your DNS resolver

If you have linux try running "dig maxcdn.bootstrapcdn.com +trace" that should show what exactly replies with the bad record.

You are hitting a DNS record we removed half a year ago. It's impossible it was cached somewhere so it must be some configuration issue on your PC or LAN.

[dblackw]

I switched to Google DNS and they work fine, showing cloudflare certificates now. The DNS was set to my ISP previously.

[jimaek]

I'm glad you got it to work :)

ISP DNS is often badly configured and should be avoided.