Analytics3.worldbrain.io is returning a cert for murgiaservices.my3cx.it

šŸžBug Reports
#1

I noticed a bunch of net::ERR_CERT_COMMON_NAME_INVALID in the background page. I verified the IPs Iā€™m getting (eg, analytics3.worldbrain.io -> 207.154.236.183) with a couple different resolvers.

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:9e:6f:56:a8:ff:14:98:5e:b8:86:5e:2d:98:9d:65:77:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R3
        Validity
            Not Before: May 10 07:15:09 2021 GMT
            Not After : Aug  8 07:15:09 2021 GMT
        Subject: CN=murgiaservices.my3cx.it
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:d2:1f:28:9b:16:60:aa:16:69:a8:f1:01:2c:d0:
                    9d:f0:76:9f:0e:58:34:5f:1c:30:94:db:70:71:7d:
                    bf:99:45:08:d5:e7:1e:e7:7a:c7:bb:da:5a:f1:07:
                    54:4c:92:ba:cb:c9:11:df:66:d3:14:da:2c:0b:4a:
                    ab:61:02:c9:e3:e7:53:3d:de:4c:3f:ed:81:9d:cb:
                    58:f1:ed:91:b6:9c:e1:c8:fe:86:44:22:5e:8b:43:
                    4b:c6:a1:04:e0:30:16:4c:91:99:22:93:b4:56:0f:
                    00:55:84:9a:4c:95:55:5c:39:27:4b:0c:8f:3a:c8:
                    f4:be:53:92:ab:30:fa:d2:c9:86:1d:df:25:aa:a3:
                    7d:a9:6d:86:47:a1:e5:b6:5d:4b:d8:94:a4:d0:02:
                    63:89:3f:88:8c:1c:60:96:61:9a:85:df:57:3d:13:
                    44:56:5c:cb:7e:af:af:37:e5:7d:e0:69:d7:aa:ae:
                    ff:83:86:e6:32:2f:9c:34:c3:21:21:0f:e9:c9:69:
                    03:17:3a:82:31:13:27:54:aa:4b:21:7b:86:17:4f:
                    db:e2:65:ff:bc:c2:49:76:4e:91:98:4f:79:73:59:
                    5f:0e:3a:7b:e4:2c:cd:9d:48:be:48:b0:6c:8f:52:
                    71:82:6a:80:59:95:79:a2:80:94:ce:95:57:9c:95:
                    5c:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                2F:BF:6C:13:99:A6:AE:64:C5:10:0B:5B:60:EE:BF:56:F2:05:B7:5B
            X509v3 Authority Key Identifier: 
                keyid:14:2E:B3:17:B7:58:56:CB:AE:50:09:40:E6:1F:AF:9D:8B:14:C2:C6

            Authority Information Access: 
                OCSP - URI:http://r3.o.lencr.org
                CA Issuers - URI:http://r3.i.lencr.org/

            X509v3 Subject Alternative Name: 
                DNS:murgiaservices.my3cx.it
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
                Policy: 1.3.6.1.4.1.44947.1.1.1
                  CPS: http://cps.letsencrypt.org

            1.3.6.1.4.1.11129.2.4.2: 
                ......w.\.C....ED.^..V..7...G..s..^........yUX.1.....H0F.!....e3;.....g)/G.ed.cTW8w.^.eH1&..!..e.Ld.X.....8@../.k...<.`.EF...l.u.}>.....Uh$....R.y+..x...j.h.~".....yUX"(.....F0D. ...(.*e.?.|..4.....5..@#gE.....<. ]..;.......<I.....Zc..d.a5W.q...
    Signature Algorithm: sha256WithRSAEncryption
         38:78:60:bf:23:2c:4a:94:56:ea:12:19:14:87:26:1e:b8:b3:
         ff:7b:86:45:50:cd:bf:e0:33:ab:51:63:cb:b3:9a:72:bb:c8:
         da:50:34:d6:7d:a4:0b:ae:79:6b:f7:66:e2:b1:47:17:63:19:
         84:2b:21:e0:92:5d:ff:3b:dd:53:40:39:88:7b:e1:d0:54:cc:
         dd:ba:60:6a:fd:ea:b5:44:e8:8b:97:d1:e9:84:62:9b:3c:87:
         8e:b6:7e:46:95:bb:e4:d1:9c:4d:a2:dc:2e:ad:fd:fc:d1:37:
         5d:4a:66:0b:d0:21:37:e5:ed:1d:53:77:cd:c7:fc:41:f6:fa:
         8e:93:ae:f8:11:96:24:62:03:ad:72:00:e2:de:bb:04:19:47:
         c1:66:6d:a5:4a:13:8f:5b:bf:be:7f:ab:44:2e:67:0a:1d:15:
         33:70:35:4b:72:e5:b6:14:a7:68:8b:d0:31:85:78:08:f7:ce:
         5f:ce:6c:dc:63:dd:55:c8:58:b7:15:05:44:5c:92:15:ec:04:
         d8:94:da:97:8e:04:58:cf:c4:23:c1:5f:a5:f0:6a:c7:6f:1a:
         50:1b:bb:43:50:66:78:8b:bb:a8:e2:d0:d4:a6:5e:83:a0:fc:
         b1:5a:fa:7c:41:7d:a4:d0:99:00:9a:2e:60:7a:30:5b:73:7e:
         b8:03:38:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
#2

That should now be fixed with 2.19.3!

Thanks for the note!

1 Like