Site certificate?

[trying]

Getting a site certificate warning and site not opening on laptop?

[PeeJay]

Deano I don't know if its linked but also not receiving the email notifications of new messages

[trying]

Still unable to access the site on laptop

[ha_banos]

I'm on a PC - Chrome browser. Site cert is good. Try usual delete all cookies, stored site data and try again.


image.png



image.png

[trying]

Neither firefox nor chrome accessing. Last able to access 9pm 30 June. I can get it using brave or my phone. Clearly something up.

https://www.ukcigarforums.com/ Peer’s Certificate has been revoked. HTTP Strict Transport Security: false HTTP Public Key Pinning: false

Source: OCSP server listed in Certificate
Location: http://ocsp.sectigo.com
Size: 619 bytes (DER)
Response time: 101.93015ms
Signature algorithm: SHA256-RSA
Signature type: CA Signed
Reported statuses: 1
This update: Jul 1, 2026 7:38:47 AM
Next update: Jul 8, 2026 7:38:46 AM
Produced at: Jul 1, 2026 7:38:47 AM

Server status: Success
Status: Revoked

[PeeJay]

I'm able to access it via my Mac but I was having problems before Dean moved the server.

[ha_banos]

Looks like this particular [OCSP] cert issue only affects Firefox (and maybe some older browsers)

Cert revoked by issuer, Sectigo it says. Likely impact more people over time. May have been revoked as result of the server move? But this is an old style cert check. See next post.

ukcigar.pem: revoked
This Update: Jul 1 06:38:47 2026 GMT
Next Update: Jul 8 06:38:46 2026 GMT
Revocation Time: Jul 1 06:38:47 2026 GMT

[ha_banos]

trying ... update your Chrome browser? Apparently Firefox still does these OCSP checks, other browsers have stopped. I use Chrome 149.0.7827.196


"The internet has officially moved into the Post-OCSP era. The CA/Browser Forum (the governing body that sets global encryption standards) voted to make OCSP completely optional for Certificate Authorities."

Instead interwebz is moving to short lived certs. Which should be automatically renewed as needed.