There are three common reasons for a cert to be invalid:
– the site is using it wrong. For example, maybe there was a site “awesome_computers.example.com” with an appropriate certificate. And they were bought out by “underpowered_computers.example.com”, and the web site switched over so that when you visit awesome, you actually get underpowered. The “underpowered” cert doesn’t match the address you typed, so it will be flagged.
– the cert expired. Embarrassing, but it happens to a lot of companies, including big ones
– someone is redirecting your browser
There’s a ton of less common reasons, too, which is why nobody can give a “one size fits all” answer to the important question, “should I click through anyway”.
Latest Answers