Site security certificate invalid

[metamorphosis]

Anyone else getting this?
Front page gives security certificate expired Monday 18th.

[Flumble]

I don't see a warning when I open https://xkcd.com/ (it uses a certificate valid until March 2018).
Moreover, I don't see any certificates that expire today on certificate logs.

[ucim]

Anyone find it odd that xkcd.com uses https, but the forums (where you have to log in) do not?

Jose

[ChakatFirepaw]

I've been getting the error, it might be because my bookmark happened to be xckd.com rather than xkcd.com. I'll know tomorrow if that was the issue.

[Flumble]

I've been getting the error, it might be because my bookmark happened to be xckd.com rather than xkcd.com. I'll know tomorrow if that was the issue.

Ah, that makes sense. xckd.com, xkcd.org and xkcd.net do have a certificate that was valid until Monday, which makes my browser scream it's dangerous, too. Please only use xkcd.com.

They also have a valid certificate, but it's not used by the server itself. So whoever is in charge of those domains –whether it's Randall/davean/a benevolent domain squatter– should check the server for those redirect sites.

Anyone find it odd that xkcd.com uses https, but the forums (where you have to log in) do not?

After years of people wondering why the forum doesn't use HTTPS, I don't find it odd anymore. (even those redirect sites use Let's Encrypt)