Expired Published Certificates #13

shift-f10 · 2025-03-07T14:47:07Z

shift-f10
Mar 7, 2025

Hello, first of all this service is amazing. There is an issue today with the published certificates on the site. They have expired as of today and the latest ones have not been pushed it seems. I have downloaded the latest one on the site today and the output is as follows:

EnhancedKeyUsageList : {Server Authentication (1.3.6.1.5.5.7.3.1), Client Authentication (1.3.6.1.5.5.7.3.2)}
DnsNameList : {*.traefik.me, traefik.me}
SendAsTrustedIssuer : False
Archived : False
Extensions : {System.Security.Cryptography.Oid, System.Security.Cryptography.Oid, System.Security.Cryptography.Oid, System.Security.Cryptography.Oid...}
FriendlyName :
IssuerName : System.Security.Cryptography.X509Certificates.X500DistinguishedName
NotAfter : 3/7/2025 4:48:14 AM
NotBefore : 12/7/2024 4:48:15 AM
HasPrivateKey : False
PrivateKey :
PublicKey : System.Security.Cryptography.X509Certificates.PublicKey
RawData : {48, 130, 3, 131...}
SerialNumber : 03DF2E998AADB3AF139D8A13A339347E804C
SubjectName : System.Security.Cryptography.X509Certificates.X500DistinguishedName
SignatureAlgorithm : System.Security.Cryptography.Oid
Thumbprint : 8A2612A28DCB752E4618526323AB27105BC65B59
Version : 3
Handle : 2334239328320
Issuer : CN=E5, O=Let's Encrypt, C=US
Subject : CN=traefik.me

Seems either the automatic process to publish the certs is broken or not working as intended.

joaquinjsb · 2025-03-07T15:37:11Z

joaquinjsb
Mar 7, 2025

Came here for this too

0 replies

creechy · 2025-03-08T00:50:02Z

creechy
Mar 8, 2025

Help @pyrou ! :-)

0 replies

1hachem · 2025-03-08T11:43:35Z

1hachem
Mar 8, 2025

😭

8000

0 replies

creechy · 2025-03-09T16:49:58Z

creechy
Mar 9, 2025

Looks like its happened before - https://gist.github.com/pyrou/4f555cd55677331c742742ee6007a73a?permalink_comment_id=4481302#gistcomment-4481302

Hope @pyrou can take a look soon!

0 replies

1hachem · 2025-03-09T17:26:52Z

1hachem
Mar 9, 2025

I just had to setup my own domain name, point it to localhost, and get a wild card certificate following dns challenge setup for my provider with traefik

  traefik:
    image: traefik:v3.3.4
    container_name: proxy
    restart: unless-stopped
    networks:
      - proxy_net
    ports:
      - 80:80
      - 443:443
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
      - ./letsencrypt:/letsencrypt
    environment:
      - DO_AUTH_TOKEN=${DO_AUTH_TOKEN}
    command:
      - --log.level=INFO
      - --global.sendAnonymousUsage=false
      - --api.insecure=true

      - --providers.docker=true
      - --providers.docker.exposedbydefault=false

      - --entryPoints.web.address=:80
      - --entryPoints.websecure.address=:443
      - --entrypoints.web.http.redirections.entrypoint.to=websecure
      - --entrypoints.web.http.redirections.entrypoint.scheme=https

      - --certificatesresolvers.letsencrypt.acme.dnschallenge=true
      - --certificatesresolvers.letsencrypt.acme.dnschallenge.provider=digitalocean

      - --certificatesresolvers.letsencrypt.acme.email=youremail@email.com
      - --certificatesresolvers.letsencrypt.acme.storage=/letsencrypt/acme.json

      - --entrypoints.websecure.http.tls=true
      - --entrypoints.websecure.http.tls.certresolver=letsencrypt
      - --entrypoints.websecure.http.tls.domains[0].main=domain.com
      - --entryPoints.websecure.http.tls.domains[0].sans=*.domain.com

2 replies

1hachem Mar 9, 2025

sorry but I am never looking back at traefik.me I risked that my devs lose a whole day

creechy Mar 9, 2025

smart. for me, its just for personal work so the less I need to maintain the better.

yocarbo · 2025-03-10T07:44:09Z

yocarbo
Mar 10, 2025

Hello @pyrou,

Do you need help maintaining your solution ?
If you're short of time, I can help you with your project.

Regards,

0 replies

pyrou · 2025-03-10T08:16:26Z

pyrou
Mar 10, 2025
Maintainer

Hi everyone,

Certificates has been renewed earlier this morning

0 replies

yocarbo · 2025-03-10T08:1 8000 9:02Z

yocarbo
Mar 10, 2025

🚀 thank you @pyrou

0 replies

creechy · 2025-03-10T14:56:58Z

creechy
Mar 10, 2025

thank you @pyrou
fwiw - the file listing of all the files sizes and dates on the home page is out of date now

           -rw-r--r-- 1 root root 1850 Jul 08 08:02 cert.pem
           -rw-r--r-- 1 root root 3750 Jul 08 08:02 chain.pem
           -rw-r--r-- 1 root root 5600 Jul 08 08:02 fullchain.pem
           -rw-r--r-- 1 root root 1704 Jul 08 08:02 privkey.pem

in case you mean to keep that updated too.

0 replies

amit-tewari · 2025-03-24T21:20:13Z

amit-tewari
Mar 24, 2025

somebody revoked the certificate.

also, seems like telecoms dont like your domain now...

$ dig +short traefik.me @192.168.10.1
natskydd.telenor.se.
35.71.190.33
52.223.20.176

$ dig +short traefik.me @1.1.1.1
92.113.26.166

0 replies

Uh oh!

Expired Published Certificates #13

Uh oh!

Replies: 10 comments · 2 replies

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

pyrou Mar 10, 2025 Maintainer

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Replies: 10 comments 2 replies

pyrou
Mar 10, 2025
Maintainer