tls host certificate with no subject
Using openssl to hit a host with certificate that has no subject name will display certificate has expired.
For example,
openssl s_client -showcerts -connect no-subject.badssl.com:443
As you can see here, the subject is missing. So you need to scroll down the certificate chain to determine actual issue.
Comments