download.eset.com certificate expired

[tbsky 11]

hi:

   I want to download eset product. but browser shows download.eset.com certificate expired

certificate Validity

Not Before: Jun 28 00:00:00 2021 GMT Not After: Jul 29 23:59:59 2022 GMT

[Peter Randziak 1,130]

Hello @tbsky,

can you please provide exact URL you tried to access and also IP of the server?

Peter

[Marcos 5,074]

Is the cert. issuer actually DigiCert Inc? Couldn't it be that SSL communication is scanned / filtered on your end?

[tbsky 11]

maybe there many servers. the server I use is:

> ping download.eset.com
PING part-0011.t-0009.t-msedge.net (13.107.213.39) 56(84) bytes of data.

> openssl s_client -connect download.eset.com:443
CONNECTED(00000003)
depth=2 C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Global Root CA
verify return:1
depth=1 C = US, O = DigiCert Inc, OU = www.digicert.com, CN = Thawte RSA CA 2018
verify return:1
depth=0 CN = download.eset.com
verify error:num=10:certificate has expired
notAfter=Jul 29 23:59:59 2022 GMT
verify return:1
depth=0 CN = download.eset.com
notAfter=Jul 29 23:59:59 2022 GMT
verify return:1

 

 

[tbsky 11]

sorry there is another ip address:

 > host download.eset.com
download.eset.com is an alias for download.gtm.eset.com.
download.gtm.eset.com is an alias for eset-dlm-cdn.azureedge.net.
eset-dlm-cdn.azureedge.net is an alias for eset-dlm-cdn.afd.azureedge.net.
eset-dlm-cdn.afd.azureedge.net is an alias for star-azureedge-prod.trafficmanager.net.
star-azureedge-prod.trafficmanager.net is an alias for dual.part-0011.t-0009.t-msedge.net.
dual.part-0011.t-0009.t-msedge.net is an alias for part-0011.t-0009.t-msedge.net.
part-0011.t-0009.t-msedge.net has address 13.107.213.39
part-0011.t-0009.t-msedge.net has address 13.107.246.39
part-0011.t-0009.t-msedge.net has IPv6 address 2620:1ec:46::39
part-0011.t-0009.t-msedge.net has IPv6 address 2620:1ec:bdf::39

 

Edited August 3, 2022 by tbsky

[Peter Randziak 1,130]

Hello @tbsky,

the old cert is being served by CDN, as of now it is not clear why.

We are checking it and working on it.

Thank you for reporting this to us.

Peter