Fosstodon

ADMIN magazineFrom ADMIN Issue 88: Need better monitoring for websites and certificates? Marcel Arentz looks at a new open source monitoring implementation from Checkmk <a href="https://www.admin-magazine.com/Archive/2025/88/Better-monitoring-for-websites-and-certificates?utm_source=mam" rel="nofollow noopener" translate="no" target="_blank">https://www.admin-magazine.com/Archive/2025/88/Better-monitoring-for-websites-and-certificates?utm_source=mam</a> <a href="https://hachyderm.io/tags/OpenSource" class="mention hashtag" rel="nofollow noopener" target="_blank">#OpenSource</a> <a href="https://hachyderm.io/tags/monitoring" class="mention hashtag" rel="nofollow noopener" target="_blank">#monitoring</a> <a href="https://hachyderm.io/tags/Checkmk" class="mention hashtag" rel="nofollow noopener" target="_blank">#Checkmk</a> <a href="https://hachyderm.io/tags/website" class="mention hashtag" rel="nofollow noopener" target="_blank">#website</a> <a href="https://hachyderm.io/tags/certificate" class="mention hashtag" rel="nofollow noopener" target="_blank">#certificate</a> <a href="https://hachyderm.io/tags/network" class="mention hashtag" rel="nofollow noopener" target="_blank">#network</a> <a href="https://hachyderm.io/tags/IT" class="mention hashtag" rel="nofollow noopener" target="_blank">#IT</a> <a href="https://hachyderm.io/tags/encryption" class="mention hashtag" rel="nofollow noopener" target="_blank">#encryption</a> <a href="https://hachyderm.io/tags/authentication" class="mention hashtag" rel="nofollow noopener" target="_blank">#authentication</a>

gyptazyAm I really the only one who uses 24hrs long living certificates which get automatically renewed and signed by an own CA via ACME?<a href="https://mastodon.gyptazy.com/tags/ssl" class="mention hashtag" rel="nofollow noopener" target="_blank">#ssl</a> <a href="https://mastodon.gyptazy.com/tags/tls" class="mention hashtag" rel="nofollow noopener" target="_blank">#tls</a> <a href="https://mastodon.gyptazy.com/tags/dane" class="mention hashtag" rel="nofollow noopener" target="_blank">#dane</a> <a href="https://mastodon.gyptazy.com/tags/acme" class="mention hashtag" rel="nofollow noopener" target="_blank">#acme</a> <a href="https://mastodon.gyptazy.com/tags/certificate" class="mention hashtag" rel="nofollow noopener" target="_blank">#certificate</a> <a href="https://mastodon.gyptazy.com/tags/certificateauthority" class="mention hashtag" rel="nofollow noopener" target="_blank">#certificateauthority</a> <a href="https://mastodon.gyptazy.com/tags/ca" class="mention hashtag" rel="nofollow noopener" target="_blank">#ca</a>

Gea-Suan Lin<a href="https://blog.gslin.org/archives/2025/07/29/12531/acme-renewal-information-%e7%9a%84%e8%a8%ad%e8%a8%88%e5%95%8f%e9%a1%8c/" rel="nofollow noopener" translate="no" target="_blank">https://blog.gslin.org/archives/2025/07/29/12531/acme-renewal-information-%e7%9a%84%e8%a8%ad%e8%a8%88%e5%95%8f%e9%a1%8c/</a>ACME Renewal Information 的設計問題<a href="https://abpe.org/tags/acme" class="mention hashtag" rel="nofollow noopener" target="_blank">#acme</a> <a href="https://abpe.org/tags/ari" class="mention hashtag" rel="nofollow noopener" target="_blank">#ari</a> <a href="https://abpe.org/tags/certificate" class="mention hashtag" rel="nofollow noopener" target="_blank">#certificate</a> <a href="https://abpe.org/tags/client" class="mention hashtag" rel="nofollow noopener" target="_blank">#client</a> <a href="https://abpe.org/tags/extension" class="mention hashtag" rel="nofollow noopener" target="_blank">#extension</a> <a href="https://abpe.org/tags/infomation" class="mention hashtag" rel="nofollow noopener" target="_blank">#infomation</a> <a href="https://abpe.org/tags/letsencrypt" class="mention hashtag" rel="nofollow noopener" target="_blank">#letsencrypt</a> <a href="https://abpe.org/tags/loading" class="mention hashtag" rel="nofollow noopener" target="_blank">#loading</a> <a href="https://abpe.org/tags/renew" class="mention hashtag" rel="nofollow noopener" target="_blank">#renew</a> <a href="https://abpe.org/tags/renewal" class="mention hashtag" rel="nofollow noopener" target="_blank">#renewal</a> <a href="https://abpe.org/tags/revocation" class="mention hashtag" rel="nofollow noopener" target="_blank">#revocation</a> <a href="https://abpe.org/tags/revoke" class="mention hashtag" rel="nofollow noopener" target="_blank">#revoke</a>

HiramFromTheChi 👨🏽‍💻💭🎓 New certification: WalkMe Builder<a href="https://mastodon.social/tags/digitaladoption" class="mention hashtag" rel="nofollow noopener" target="_blank">#digitaladoption</a> <a href="https://mastodon.social/tags/walkme" class="mention hashtag" rel="nofollow noopener" target="_blank">#walkme</a> <a href="https://mastodon.social/tags/nocode" class="mention hashtag" rel="nofollow noopener" target="_blank">#nocode</a> <a href="https://mastodon.social/tags/lowcode" class="mention hashtag" rel="nofollow noopener" target="_blank">#lowcode</a> <a href="https://mastodon.social/tags/certification" class="mention hashtag" rel="nofollow noopener" target="_blank">#certification</a> <a href="https://mastodon.social/tags/certificate" class="mention hashtag" rel="nofollow noopener" target="_blank">#certificate</a>

Daniel AJ SokolovAlmost half of newborns worldwide are <a href="https://social.heise.de/tags/registered" class="mention hashtag" rel="nofollow noopener" target="_blank">#registered</a> at birth. That means a bit over half of <a href="https://social.heise.de/tags/children" class="mention hashtag" rel="nofollow noopener" target="_blank">#children</a> don't have a <a href="https://social.heise.de/tags/birth" class="mention hashtag" rel="nofollow noopener" target="_blank">#birth</a> <a href="https://social.heise.de/tags/certificate" class="mention hashtag" rel="nofollow noopener" target="_blank">#certificate</a> , in most cases for life.

Päivi Pulkkinen<a href="https://mastodon.green/tags/danishswedishfarmdog" class="mention hashtag" rel="nofollow noopener" target="_blank">#danishswedishfarmdog</a> <a href="https://mastodon.green/tags/certificate" class="mention hashtag" rel="nofollow noopener" target="_blank">#certificate</a> <a href="https://mastodon.green/tags/beginners" class="mention hashtag" rel="nofollow noopener" target="_blank">#beginners</a> <a href="https://mastodon.green/tags/start" class="mention hashtag" rel="nofollow noopener" target="_blank">#start</a> <a href="https://mastodon.green/tags/ristiina" class="mention hashtag" rel="nofollow noopener" target="_blank">#ristiina</a> <a href="https://mastodon.green/tags/dogshow" class="mention hashtag" rel="nofollow noopener" target="_blank">#dogshow</a>

Hacker NewsLinux and Secure Boot certificate expiration<a href="https://lwn.net/SubscriberLink/1029767/43b62a7a7408c2a9/" rel="nofollow noopener" translate="no" target="_blank">https://lwn.net/SubscriberLink/1029767/43b62a7a7408c2a9/</a><a href="https://mastodon.social/tags/HackerNews" class="mention hashtag" rel="nofollow noopener" target="_blank">#HackerNews</a> <a href="https://mastodon.social/tags/Linux" class="mention hashtag" rel="nofollow noopener" target="_blank">#Linux</a> <a href="https://mastodon.social/tags/SecureBoot" class="mention hashtag" rel="nofollow noopener" target="_blank">#SecureBoot</a> <a href="https://mastodon.social/tags/Expiration" class="mention hashtag" rel="nofollow noopener" target="_blank">#Expiration</a> <a href="https://mastodon.social/tags/Certificate" class="mention hashtag" rel="nofollow noopener" target="_blank">#Certificate</a> <a href="https://mastodon.social/tags/Cybersecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#Cybersecurity</a> <a href="https://mastodon.social/tags/TechNews" class="mention hashtag" rel="nofollow noopener" target="_blank">#TechNews</a> <a href="https://mastodon.social/tags/OpenSource" class="mention hashtag" rel="nofollow noopener" target="_blank">#OpenSource</a>

ADMIN magazineLet's Encrypt issues its first IP address certificate <a href="https://www.admin-magazine.com/News/Let-s-Encrypt-Issues-First-IP-Address-Certificate?utm_source=mam" rel="nofollow noopener" translate="no" target="_blank">https://www.admin-magazine.com/News/Let-s-Encrypt-Issues-First-IP-Address-Certificate?utm_source=mam</a> <a href="https://hachyderm.io/tags/IPAddress" class="mention hashtag" rel="nofollow noopener" target="_blank">#IPAddress</a> <a href="https://hachyderm.io/tags/certificate" class="mention hashtag" rel="nofollow noopener" target="_blank">#certificate</a> <a href="https://hachyderm.io/tags/LetsEncrypt" class="mention hashtag" rel="nofollow noopener" target="_blank">#LetsEncrypt</a> <a href="https://hachyderm.io/tags/certs" class="mention hashtag" rel="nofollow noopener" target="_blank">#certs</a> <a href="https://hachyderm.io/tags/TLS" class="mention hashtag" rel="nofollow noopener" target="_blank">#TLS</a>

Nudeln Al Dente"Notepad++ is an open source project without a registered business entity, which makes traditional validation challenging. We’re currently seeking a certificate authority that can issue a code signing certificate directly to “Notepad++” rather than to an individual. If you’re able to provide such a certificate, or know an organization that can, please don’t hesitate to get in touch - we’d greatly appreciate your help."<a href="https://notepad-plus-plus.org/news/8.8.2-available-in-1-week-without-certificate/" rel="nofollow noopener" translate="no" target="_blank">https://notepad-plus-plus.org/news/8.8.2-available-in-1-week-without-certificate/</a><a href="https://mstdn.social/tags/Notepadplusplus" class="mention hashtag" rel="nofollow noopener" target="_blank">#Notepadplusplus</a> <a href="https://mstdn.social/tags/certificate" class="mention hashtag" rel="nofollow noopener" target="_blank">#certificate</a>

st1nger :unverified: 🏴‍☠️ :linux: :freebsd:Let's Encrypt, a <a href="https://infosec.exchange/tags/certificate" class="mention hashtag" rel="nofollow noopener" target="_blank">#certificate</a> authority (CA) known for its free <a href="https://infosec.exchange/tags/TLS" class="mention hashtag" rel="nofollow noopener" target="_blank">#TLS</a>/SSL certificates, has begun issuing digital certificates for <a href="https://infosec.exchange/tags/IP" class="mention hashtag" rel="nofollow noopener" target="_blank">#IP</a> addresses. It's not the first <a href="https://infosec.exchange/tags/CA" class="mention hashtag" rel="nofollow noopener" target="_blank">#CA</a> to do so. <a href="https://infosec.exchange/tags/PositiveSSL" class="mention hashtag" rel="nofollow noopener" target="_blank">#PositiveSSL</a>, <a href="https://infosec.exchange/tags/Sectigo" class="mention hashtag" rel="nofollow noopener" target="_blank">#Sectigo</a>, and <a href="https://infosec.exchange/tags/GeoTrust" class="mention hashtag" rel="nofollow noopener" target="_blank">#GeoTrust</a> all offer TLS/SSL certificates for use with IP addresses, at prices ranging from $40 to $90 or so annually. But Let's Encrypt does so at no cost. <a href="https://www.theregister.com/2025/07/03/lets_encrypt_rolls_out_free/" rel="nofollow noopener" translate="no" target="_blank">https://www.theregister.com/2025/07/03/lets_encrypt_rolls_out_free/</a>

Inautilo<a href="https://mastodon.social/tags/Development" class="mention hashtag" rel="nofollow noopener" target="_blank">#Development</a> <a href="https://mastodon.social/tags/Announcements" class="mention hashtag" rel="nofollow noopener" target="_blank">#Announcements</a> Our first IP address certificate · Let’s Encrypt starts rolling out the new option <a href="https://ilo.im/16530s" rel="nofollow noopener" translate="no" target="_blank">https://ilo.im/16530s</a>_____ <a href="https://mastodon.social/tags/LetsEncrypt" class="mention hashtag" rel="nofollow noopener" target="_blank">#LetsEncrypt</a> <a href="https://mastodon.social/tags/CA" class="mention hashtag" rel="nofollow noopener" target="_blank">#CA</a> <a href="https://mastodon.social/tags/IpAddress" class="mention hashtag" rel="nofollow noopener" target="_blank">#IpAddress</a> <a href="https://mastodon.social/tags/Certificate" class="mention hashtag" rel="nofollow noopener" target="_blank">#Certificate</a> <a href="https://mastodon.social/tags/SSL" class="mention hashtag" rel="nofollow noopener" target="_blank">#SSL</a> <a href="https://mastodon.social/tags/TLS" class="mention hashtag" rel="nofollow noopener" target="_blank">#TLS</a> <a href="https://mastodon.social/tags/HTTPS" class="mention hashtag" rel="nofollow noopener" target="_blank">#HTTPS</a> <a href="https://mastodon.social/tags/WebDev" class="mention hashtag" rel="nofollow noopener" target="_blank">#WebDev</a> <a href="https://mastodon.social/tags/Frontend" class="mention hashtag" rel="nofollow noopener" target="_blank">#Frontend</a> <a href="https://mastodon.social/tags/Backend" class="mention hashtag" rel="nofollow noopener" target="_blank">#Backend</a>

Gea-Suan Lin<a href="https://blog.gslin.org/archives/2025/06/26/12488/lets-encrypt-%e7%b0%bd-ip-address-%e7%9a%84%e8%a8%88%e7%95%ab/" rel="nofollow noopener" translate="no" target="_blank">https://blog.gslin.org/archives/2025/06/26/12488/lets-encrypt-%e7%b0%bd-ip-address-%e7%9a%84%e8%a8%88%e7%95%ab/</a>Let's Encrypt 簽 IP address 的計畫<a href="https://abpe.org/tags/address" class="mention hashtag" rel="nofollow noopener" target="_blank">#address</a> <a href="https://abpe.org/tags/ca" class="mention hashtag" rel="nofollow noopener" target="_blank">#ca</a> <a href="https://abpe.org/tags/certificate" class="mention hashtag" rel="nofollow noopener" target="_blank">#certificate</a> <a href="https://abpe.org/tags/ip" class="mention hashtag" rel="nofollow noopener" target="_blank">#ip</a> <a href="https://abpe.org/tags/letsencrypt" class="mention hashtag" rel="nofollow noopener" target="_blank">#letsencrypt</a> <a href="https://abpe.org/tags/root" class="mention hashtag" rel="nofollow noopener" target="_blank">#root</a>

:hacker_p: :hacker_f: :hacker_t:Dear <a href="https://infosec.exchange/tags/pki" class="mention hashtag" rel="nofollow noopener" target="_blank">#pki</a> (specifically <a href="https://infosec.exchange/tags/xpki" class="mention hashtag" rel="nofollow noopener" target="_blank">#xpki</a>) people: are you aware of any relying party that uses CN as part of the <a href="https://infosec.exchange/tags/certificate" class="mention hashtag" rel="nofollow noopener" target="_blank">#certificate</a> validation. I was told that having IP addresses in X.509 CN field (corresponding to an existing IP SAN) poses a security danger, but I cannot figure out why...Context: <a href="https://infosec.exchange/@pft/114745281836976380" translate="no" rel="nofollow noopener" target="_blank">https://infosec.exchange/@pft/114745281836976380</a>

Gytis RepečkaRunning e-mail servers is always fun: as the time came to renew TLS certificate on one machine doing e-mail transmission (SMTP), came to know <code>TLSA</code> records are now supposed to be <code>3 1 1</code> (no more <code>3 0 1</code>) :blobcateyes:There is an added benefit of <code>3</code> (<code>DANE-EE</code>) <code>1</code> (subject public key) <code>1</code> (SHA2-256 hash digest) - if you do not rotate your private key to issue TLS certificate, you don't need to update the <code>TLSA</code> record - signature can be squeezed from key and certificate is not necessary at that point. If you do rotate private keys, this enables you to <a href="https://mail.sys4.de/pipermail/dane-users/2018-February/000440.html" rel="nofollow noopener" target="_blank">pre-create DNS records</a> even before certificate is issued (given that you already generated keys) - that is really nice :blobcatthumbsup:<a href="https://social.gyt.is/tags/serveradmin" class="mention hashtag" rel="nofollow noopener" target="_blank">#serveradmin</a> <a href="https://social.gyt.is/tags/email" class="mention hashtag" rel="nofollow noopener" target="_blank">#email</a> <a href="https://social.gyt.is/tags/dane" class="mention hashtag" rel="nofollow noopener" target="_blank">#dane</a> <a href="https://social.gyt.is/tags/dns" class="mention hashtag" rel="nofollow noopener" target="_blank">#dns</a> <a href="https://social.gyt.is/tags/tls" class="mention hashtag" rel="nofollow noopener" target="_blank">#tls</a> <a href="https://social.gyt.is/tags/certificate" class="mention hashtag" rel="nofollow noopener" target="_blank">#certificate</a> <a href="https://social.gyt.is/tags/sha256" class="mention hashtag" rel="nofollow noopener" target="_blank">#sha256</a>

Gea-Suan Lin<a href="https://blog.gslin.org/archives/2025/06/18/12467/aws-%e4%b9%9f%e9%96%8b%e5%a7%8b%e8%b3%a3-certificate-%e4%ba%86/" rel="nofollow noopener" translate="no" target="_blank">https://blog.gslin.org/archives/2025/06/18/12467/aws-%e4%b9%9f%e9%96%8b%e5%a7%8b%e8%b3%a3-certificate-%e4%ba%86/</a>AWS 也開始賣 Certificate 了<a href="https://abpe.org/tags/acm" class="mention hashtag" rel="nofollow noopener" target="_blank">#acm</a> <a href="https://abpe.org/tags/amazon" class="mention hashtag" rel="nofollow noopener" target="_blank">#amazon</a> <a href="https://abpe.org/tags/aws" class="mention hashtag" rel="nofollow noopener" target="_blank">#aws</a> <a href="https://abpe.org/tags/ca" class="mention hashtag" rel="nofollow noopener" target="_blank">#ca</a> <a href="https://abpe.org/tags/certificate" class="mention hashtag" rel="nofollow noopener" target="_blank">#certificate</a> <a href="https://abpe.org/tags/cloud" class="mention hashtag" rel="nofollow noopener" target="_blank">#cloud</a> <a href="https://abpe.org/tags/export" class="mention hashtag" rel="nofollow noopener" target="_blank">#export</a> <a href="https://abpe.org/tags/manager" class="mention hashtag" rel="nofollow noopener" target="_blank">#manager</a> <a href="https://abpe.org/tags/security" class="mention hashtag" rel="nofollow noopener" target="_blank">#security</a> <a href="https://abpe.org/tags/service" class="mention hashtag" rel="nofollow noopener" target="_blank">#service</a> <a href="https://abpe.org/tags/ssl" class="mention hashtag" rel="nofollow noopener" target="_blank">#ssl</a> <a href="https://abpe.org/tags/tls" class="mention hashtag" rel="nofollow noopener" target="_blank">#tls</a>

DeadSwitch @ T0m's 1T C4feCybersec expert? Stacks of certs? CTFs on repeat? No battle scars? Think again. Are you an expert - or just dressed like one? <a href="https://mastodon.social/tags/CyberSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#CyberSecurity</a> <a href="https://mastodon.social/tags/Expert" class="mention hashtag" rel="nofollow noopener" target="_blank">#Expert</a> <a href="https://mastodon.social/tags/Certificate" class="mention hashtag" rel="nofollow noopener" target="_blank">#Certificate</a> <a href="https://mastodon.social/tags/Question" class="mention hashtag" rel="nofollow noopener" target="_blank">#Question</a> <a href="https://mastodon.social/tags/CallOut" class="mention hashtag" rel="nofollow noopener" target="_blank">#CallOut</a>

Gea-Suan Lin<a href="https://blog.gslin.org/archives/2025/06/05/12436/lets-encrypt-%e9%87%9d%e5%b0%8d%e7%84%a1%e4%b8%bb%e7%94%a8%e6%88%b6%e7%ab%af%e7%9a%84%e9%99%90%e5%88%b6/" rel="nofollow noopener" translate="no" target="_blank">https://blog.gslin.org/archives/2025/06/05/12436/lets-encrypt-%e9%87%9d%e5%b0%8d%e7%84%a1%e4%b8%bb%e7%94%a8%e6%88%b6%e7%ab%af%e7%9a%84%e9%99%90%e5%88%b6/</a>Let's Encrypt 針對無主用戶端的限制<a href="https://abpe.org/tags/account" class="mention hashtag" rel="nofollow noopener" target="_blank">#account</a> <a href="https://abpe.org/tags/acme" class="mention hashtag" rel="nofollow noopener" target="_blank">#acme</a> <a href="https://abpe.org/tags/certificate" class="mention hashtag" rel="nofollow noopener" target="_blank">#certificate</a> <a href="https://abpe.org/tags/client" class="mention hashtag" rel="nofollow noopener" target="_blank">#client</a> <a href="https://abpe.org/tags/domain" class="mention hashtag" rel="nofollow noopener" target="_blank">#domain</a> <a href="https://abpe.org/tags/hostname" class="mention hashtag" rel="nofollow noopener" target="_blank">#hostname</a> <a href="https://abpe.org/tags/letsencrypt" class="mention hashtag" rel="nofollow noopener" target="_blank">#letsencrypt</a> <a href="https://abpe.org/tags/limit" class="mention hashtag" rel="nofollow noopener" target="_blank">#limit</a> <a href="https://abpe.org/tags/name" class="mention hashtag" rel="nofollow noopener" target="_blank">#name</a> <a href="https://abpe.org/tags/rate" class="mention hashtag" rel="nofollow noopener" target="_blank">#rate</a> <a href="https://abpe.org/tags/security" class="mention hashtag" rel="nofollow noopener" target="_blank">#security</a> <a href="https://abpe.org/tags/zombie" class="mention hashtag" rel="nofollow noopener" target="_blank">#zombie</a>

Brian SlettenTransitive trust is tricky.<a href="https://mastodon.social/tags/certificate" class="mention hashtag" rel="nofollow noopener" target="_blank">#certificate</a> <a href="https://mastodon.social/tags/ca" class="mention hashtag" rel="nofollow noopener" target="_blank">#ca</a> <a href="https://thehackernews.com/2025/06/google-chrome-to-distrust-two.html" rel="nofollow noopener" translate="no" target="_blank">https://thehackernews.com/2025/06/google-chrome-to-distrust-two.html</a>

TSM at WorkAt least the network <a href="https://noc.social/tags/routing" class="mention hashtag" rel="nofollow noopener" target="_blank">#routing</a> problem was my own easily-fixed error, spotted when I double-checked my previous work.Only to discover a <a href="https://noc.social/tags/certificate" class="mention hashtag" rel="nofollow noopener" target="_blank">#certificate</a> problem. Tedious, not difficult.One of these days I will finish peeling this onion.

linkdropcrt.sh | cert-populations <a href="https://crt.sh/cert-populations" rel="nofollow noopener" translate="no" target="_blank">https://crt.sh/cert-populations</a> <a href="https://troet.cafe/tags/certificate" class="mention hashtag" rel="nofollow noopener" target="_blank">#certificate</a> <a href="https://troet.cafe/tags/population" class="mention hashtag" rel="nofollow noopener" target="_blank">#population</a>

Recent searches

Search options

Administered by:

Server stats:

#certificate