CRL & OCSP report for 0-global.factiva.com.sslib.cpce-polyu.edu.hk - lib.cpce-polyu.edu.hk

One of the certificates in this chain is revoked!

Revoked certificates can't be trusted and will cause errors like "NET::ERR_CERT_REVOKED" in browsers

lib.cpce-polyu.edu.hk

This certificate was cached at
Certificate details for lib.cpce-polyu.edu.hk (At position 0 in certificate chain)
Serial number:
hex: 2b73fc1da172b0
int: 12230950664630960
Issued by: Go Daddy Secure Certificate Authority - G2
Public Key Algorithm: RSA
Not valid before:
Not valid after:
Organization unit: Domain Control Validated
  • This certificate does not contain any links to an LDAP server
  • This certificate does not contain any internal server links
  • This certificate does not contain any links with an unknown format

View complete certificate details for 0-global.factiva.com.sslib.cpce-polyu.edu.hk.

Certificate Revocation List (CRL)

This CRL was cached at
http://crl.godaddy.com/gdig2s1-87.crl

CRL information

Source: CRL Distribution Points in Certificate
Location: http://crl.godaddy.com/gdig2s1-87.crl
Size: 2939876 bytes (DER data)
Response time: 391.620361ms
This update:
Next update:
Revoked: No
Revoked certificates in CRL: 71833

Relevant server response headers

Date:
Last Modified:
Expires:

Server and network information

Server Software: Apache

Raw CRL response headers

Accept-Ranges: [bytes]
Cache-Control: [max-age=259200]
Content-Length: [2939876]
Content-Type: [application/pkix-crl]
Date: [Fri, 17 Feb 2017 19:12:18 GMT]
Etag: ["2cdbe4-548a8d96c1cc0"]
Expires: [Mon, 20 Feb 2017 19:12:18 GMT]
Last-Modified: [Thu, 16 Feb 2017 17:08:43 GMT]
P3p: [CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"]
Server: [Apache]
  • Content-Type in response is set to 'application/pkix-crl (RFC 5280, section 4.2.1.13)'
  • This CRL file is DER encoded
  • Response is already valid
  • Response is not expired
  • ThisUpdate is less than seven days old, CRLs must be updated and reissued at least every seven days (Mozilla Maintenance Policy section 3)
  • The NextUpdate field is not more than ten days beyond the value of the ThisUpdate field (Mozilla & Baseline Requirements)
  • Last-Modified header is not the same as ThisUpdate (RFC 5019, section 6.2)
  • NextUpdate is after the date in the Expires cache header
  • The Cache-Control max-age header does not outlive NextUpdate
  • ThisUpdate has a date before NextUpdate
  • Expires cache header is not the same as the NextUpdate field (RFC 5019 section 6.2)

Online Certificate Status Protocol (OCSP)

This OCSP response was cached at
http://ocsp.godaddy.com/ (GET)Revoked

OCSP response information

Source: Authority Information Access in Certificate
Location: http://ocsp.godaddy.com/ (GET)
Size: 1799 bytes (DER data)
Response time: 56.792404ms
Signature algorithm: SHA1WithRSA
Signature type: CA Deligated
Signed by: Go Daddy Validation Authority - G2
Issued by: Go Daddy Secure Certificate Authority - G2
Signing certificate validity: 2016-12-13 - 2017-12-13
Signing certificate algorithm: SHA256-RSA
Reported statuses: 1
This update:
Next update:
Produced at:
Status: Revoked

Relevant server response headers

Date:
Last Modified:
Expires:
Cache Control Max-age: 28h37m40s

Server and network information

Server Software: Apache

URL used for GET request

http:/MEgwRjBEMEIwQDAJBgUrDgMCGgUABBS2CA1fbGt26xPkOKX4ZguoUjM0TgQUQMK9J47MNIMwojPX%2B2yz8LQsgM4CBytz%2FB2hcrA%3D

Raw OCSP request (PEM encoded)

-----BEGIN OCSP REQUEST-----
MEgwRjBEMEIwQDAJBgUrDgMCGgUABBS2CA1fbGt26xPkOKX4ZguoUjM0TgQUQMK9
J47MNIMwojPX+2yz8LQsgM4CBytz/B2hcrA=
-----END OCSP REQUEST-----

Raw OCSP response (PEM encoded)

-----BEGIN OCSP RESPONSE-----
MIIHAwoBAKCCBvwwggb4BgkrBgEFBQcwAQEEggbpMIIG5TCCARChejB4MQswCQYD
VQQGEwJVUzEQMA4GA1UECBMHQXJpem9uYTETMBEGA1UEBxMKU2NvdHRzZGFsZTEV
MBMGA1UEChMMR29EYWRkeSBJbmMuMSswKQYDVQQDEyJHbyBEYWRkeSBWYWxpZGF0
aW9uIEF1dGhvcml0eSAtIEcyGA8yMDE3MDIyMTA2MTUzMFowgYAwfjBAMAkGBSsO
AwIaBQAEFLYIDV9sa3brE+Q4pfhmC6hSMzROBBRAwr0njsw0gzCiM9f7bLPwtCyA
zgIHK3P8HaFysKEWGA8yMDE3MDIwNjA0MTEwOVqgAwoBBRgPMjAxNzAyMjEwNjE1
MzBaoBEYDzIwMTcwMjIyMTgxNTMwWjANBgkqhkiG9w0BAQUFAAOCAQEAM6MWdsFc
z9xsU9KyioQLOEcRwgHOxZZG2Yz4jshZjofcgjZCXiBkyKDuQ9mCtEWT2fouZF8U
qsj2UFpChFOYGGenwHPXhn1427fIhkQrQRkDaA/JVLQnXOazWsvOc9CeFg4a2AYc
C4xhPRrAR2fIdjoban0Df3cNTDL4iBRNE1ICxlzyrBaM0IPMvU6ftFRG4TtUpvSG
AIl1n2f2ItBtBFogJUffvGBMOwpJMDW0m2EWHFu8TYAbWjfR5RumnbBWLFB3huuU
Ka7iOUR8Xudss/tLhRutjNHL9dXKx02P1PA+lCrgRz5gUo3Pms7TTN7qV9Ceg1xk
6FOLvt6GRLlb36CCBLkwggS1MIIEsTCCA5mgAwIBAgIIM6ay+LB4WGMwDQYJKoZI
hvcNAQELBQAwgbQxCzAJBgNVBAYTAlVTMRAwDgYDVQQIEwdBcml6b25hMRMwEQYD
VQQHEwpTY290dHNkYWxlMRowGAYDVQQKExFHb0RhZGR5LmNvbSwgSW5jLjEtMCsG
A1UECxMkaHR0cDovL2NlcnRzLmdvZGFkZHkuY29tL3JlcG9zaXRvcnkvMTMwMQYD
VQQDEypHbyBEYWRkeSBTZWN1cmUgQ2VydGlmaWNhdGUgQXV0aG9yaXR5IC0gRzIw
HhcNMTYxMjEzMDcwMDAwWhcNMTcxMjEzMDcwMDAwWjB4MQswCQYDVQQGEwJVUzEQ
MA4GA1UECBMHQXJpem9uYTETMBEGA1UEBxMKU2NvdHRzZGFsZTEVMBMGA1UEChMM
R29EYWRkeSBJbmMuMSswKQYDVQQDEyJHbyBEYWRkeSBWYWxpZGF0aW9uIEF1dGhv
cml0eSAtIEcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxK37MN9
B3/4QMRIgfjEg4vMmQKA4WrJYpgyxWO9gfu8J2VTQQAa7YCXNiIiMptoZgttAW05
/6iFqIuXp7BfTgUiZ1bpz3vlSiJ75ecwZg5XJKdYche/+rp8VftGDCHnS84wIO4o
cIKnHcythTmDSQ/cn4+y/2MTY1zSOQ54dBp2ulVOjwcYJajPtcIsUh8J2ONaSgMu
7gHT/3J6E1oL5nCs7L1ydQQ2GcT/7RYwihR04uQP8SrbgBNUFVcF7tDejj/uHNhY
+gAGKCsekHqrW7UgukH5l7Yret1bPi33eT7KoLJudlUUq4lnLndVLg8OzN+JEd8g
RmjZNkYGAhV9fwIDAQABo4IBADCB/TAMBgNVHRMBAf8EAjAAMA4GA1UdDwEB/wQE
AwIGwDATBgNVHSUEDDAKBggrBgEFBQcDCTAdBgNVHQ4EFgQUxYZKIX7Z8rV9oQGs
rF5d/hWC978wDwYJKwYBBQUHMAEFBAIFADBMBgNVHR8ERTBDMEGgP6A9hjtodHRw
Oi8vY3JsLmdvZGFkZHkuY29tL3JlcG9zaXRvcnkvbWFzdGVyZ29kYWRkeTJpc3N1
aW5nLmNybDBKBgNVHSAEQzBBMD8GC2CGSAGG/W0BBxcBMDAwLgYIKwYBBQUHAgEW
Imh0dHA6Ly9jcmwuZ29kYWRkeS5jb20vcmVwb3NpdG9yeS8wDQYJKoZIhvcNAQEL
BQADggEBACb/o/NytfJvWRn3HBL23ae0+Y2r711BwSWYtbi5dyc0L5LRDhbXIiyy
KglZP+s2xOGswOel3AIOkhMkXKKno61qCDE3hH3Xvz73ZiusB1S+9G3+2yDo1zVp
4q1wmOMO29dEIbCJD0DPZBpp+bnYKHt03AZgBQ2TaZlETWzp9nQCUNzqQIQEDu58
dljvVBs7vDYVOkC7VCdm9VlXJoNVQHeuggtMdpp+7Ur1QbhPODIrTJB4GtljDX2D
nXcO60I+d8AZQRLMJ/iBRsOkN/Bveu6phtmXaGnRhA79iqt0NDp4SUAs6XAbLCta
9hlvL22CC0VQWJk7ZwCm6qqoyMnygo8=
-----END OCSP RESPONSE-----

Raw OCSP Signing Certificate (PEM encoded)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Raw OCSP response headers

Cache-Control: [max-age=103060, public, no-transform, must-revalidate]
Content-Length: [1799]
Content-Transfer-Encoding: [Binary]
Content-Type: [application/ocsp-response]
Date: [Tue, 21 Feb 2017 12:07:25 GMT]
Etag: ["cc133a7917fa183fc89d8f03da09488a7cc77cd0"]
Expires: [Wed, 22 Feb 2017 18:15:30 GMT]
Last-Modified: [Tue, 21 Feb 2017 06:15:30 GMT]
P3p: [CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"]
Server: [Apache]
  • OCSP signing certificate is already valid
  • OCSP signing certificate is not expired
  • OCSP signing certificate does not expire before NextUpdate
  • OCSP signing certificate does contain the Extended Key Usage for OCSP Signing
  • OCSP signing certificate does contain the OCSP No Check extension
  • Content-Type in response is set to 'application/ocsp-response'
  • Response is already valid
  • Response is not expired
  • ThisUpdate is less than four days old, OCSP information must be updated at least every four days (Mozilla & Baseline Requirements)
  • The NextUpdate field is not more than ten days beyond the value of the ThisUpdate field (Mozilla & Baseline Requirements)
  • Last-Modified header is the same as ThisUpdate (RFC 5019, section 6.2)
  • NextUpdate is after the date in the Expires cache header
  • The Cache-Control max-age header does not outlive NextUpdate
  • ThisUpdate has a date before NextUpdate
  • Expires cache header is the same as the NextUpdate field (RFC 5019 section 6.2)
This OCSP response was cached at
http://ocsp.godaddy.com/ (POST)Revoked

OCSP response information

Source: Authority Information Access in Certificate
Location: http://ocsp.godaddy.com/ (POST)
Size: 1799 bytes (DER data)
Response time: 55.673474ms
Signature algorithm: SHA1WithRSA
Signature type: CA Deligated
Signed by: Go Daddy Validation Authority - G2
Issued by: Go Daddy Secure Certificate Authority - G2
Signing certificate validity: 2016-12-13 - 2017-12-13
Signing certificate algorithm: SHA256-RSA
Reported statuses: 1
This update:
Next update:
Produced at:
Status: Revoked

Relevant server response headers

Date:
Last Modified:
Expires:
Cache Control Max-age: 28h37m26s

Server and network information

Server Software: Apache

Raw OCSP request (PEM encoded)

-----BEGIN OCSP REQUEST-----
MEgwRjBEMEIwQDAJBgUrDgMCGgUABBS2CA1fbGt26xPkOKX4ZguoUjM0TgQUQMK9
J47MNIMwojPX+2yz8LQsgM4CBytz/B2hcrA=
-----END OCSP REQUEST-----

Raw OCSP response (PEM encoded)

-----BEGIN OCSP RESPONSE-----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-----END OCSP RESPONSE-----

Raw OCSP Signing Certificate (PEM encoded)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Raw OCSP response headers

Cache-Control: [max-age=103046, public, no-transform, must-revalidate]
Content-Length: [1799]
Content-Transfer-Encoding: [Binary]
Content-Type: [application/ocsp-response]
Date: [Tue, 21 Feb 2017 12:07:40 GMT]
Etag: ["cc133a7917fa183fc89d8f03da09488a7cc77cd0"]
Expires: [Wed, 22 Feb 2017 18:15:30 GMT]
Last-Modified: [Tue, 21 Feb 2017 06:15:30 GMT]
P3p: [CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"]
Server: [Apache]
  • OCSP signing certificate is already valid
  • OCSP signing certificate is not expired
  • OCSP signing certificate does not expire before NextUpdate
  • OCSP signing certificate does contain the Extended Key Usage for OCSP Signing
  • OCSP signing certificate does contain the OCSP No Check extension
  • Content-Type in response is set to 'application/ocsp-response'
  • Response is already valid
  • Response is not expired
  • ThisUpdate is less than four days old, OCSP information must be updated at least every four days (Mozilla & Baseline Requirements)
  • The NextUpdate field is not more than ten days beyond the value of the ThisUpdate field (Mozilla & Baseline Requirements)
  • Last-Modified header is the same as ThisUpdate (RFC 5019, section 6.2)
  • NextUpdate is after the date in the Expires cache header
  • The Cache-Control max-age header does not outlive NextUpdate
  • ThisUpdate has a date before NextUpdate
  • Expires cache header is the same as the NextUpdate field (RFC 5019 section 6.2)

Go Daddy Secure Certificate Authority - G2 (CA Certificate)

This certificate was cached at
Certificate details for Go Daddy Secure Certificate Authority - G2 (At position 1 in certificate chain)
Serial number:
hex: 7
int: 7
Issued by: Go Daddy Root Certificate Authority - G2
Public Key Algorithm: RSA
Not valid before:
Not valid after:
Organization: GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US
  • This certificate does not contain any links to an LDAP server
  • This certificate does not contain any internal server links
  • This certificate does not contain any links with an unknown format

Certificate Revocation List (CRL)

This CRL was cached at
http://crl.godaddy.com/gdroot-g2.crl

CRL information

Source: CRL Distribution Points in Certificate
Location: http://crl.godaddy.com/gdroot-g2.crl
Size: 462 bytes (DER data)
Response time: 145.808793ms
This update:
Next update:
Revoked: No
Revoked certificates in CRL: 0

Relevant server response headers

Date:
Last Modified:
Expires:

Server and network information

Server Software: Apache

Raw CRL response headers

Accept-Ranges: [bytes]
Cache-Control: [max-age=259200]
Content-Length: [462]
Content-Type: [application/pkix-crl]
Date: [Mon, 20 Feb 2017 23:59:24 GMT]
Etag: ["1ce-543a28e7ef080"]
Expires: [Thu, 23 Feb 2017 23:59:24 GMT]
Last-Modified: [Wed, 14 Dec 2016 18:32:18 GMT]
P3p: [CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"]
Server: [Apache]
  • Content-Type in response is set to 'application/pkix-crl (RFC 5280, section 4.2.1.13)'
  • This CRL file is DER encoded
  • Response is already valid
  • Response is not expired
  • Revocation information is updated at least once every twelve months
  • The value of the NextUpdate field is not more than twelve months beyond the value of the ThisUpdate field
  • Last-Modified header is not the same as ThisUpdate (RFC 5019, section 6.2)
  • NextUpdate is after the date in the Expires cache header
  • The Cache-Control max-age header does not outlive NextUpdate
  • ThisUpdate has a date before NextUpdate
  • Expires cache header is not the same as the NextUpdate field (RFC 5019 section 6.2)

Online Certificate Status Protocol (OCSP)

This OCSP response was cached at
http://ocsp.godaddy.com/ (GET)Good

OCSP response information

Source: Authority Information Access in Certificate
Location: http://ocsp.godaddy.com/ (GET)
Size: 1730 bytes (DER data)
Response time: 45.030137ms
Signature algorithm: SHA1WithRSA
Signature type: CA Deligated
Signed by: Go Daddy Root Validation Authority - G2
Issued by: Go Daddy Root Certificate Authority - G2
Signing certificate validity: 2016-12-13 - 2017-12-13
Signing certificate algorithm: SHA256-RSA
Reported statuses: 1
This update:
Next update:
Produced at:
Status: Good

Relevant server response headers

Date:
Last Modified:
Expires:
Cache Control Max-age: 34h0m31s

Server and network information

Server Software: Apache

URL used for GET request

http:/MEIwQDA%2BMDwwOjAJBgUrDgMCGgUABBQdI2%2BOBkuXH93foRUj4a7lAr4rGwQUOpqFBxBnKLbv9r0FQW4gwZTaD94CAQc%3D

Raw OCSP request (PEM encoded)

-----BEGIN OCSP REQUEST-----
MEIwQDA+MDwwOjAJBgUrDgMCGgUABBQdI2+OBkuXH93foRUj4a7lAr4rGwQUOpqF
BxBnKLbv9r0FQW4gwZTaD94CAQc=
-----END OCSP REQUEST-----

Raw OCSP response (PEM encoded)

-----BEGIN OCSP RESPONSE-----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-----END OCSP RESPONSE-----

Raw OCSP Signing Certificate (PEM encoded)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Raw OCSP response headers

Cache-Control: [max-age=122431, public, no-transform, must-revalidate]
Content-Length: [1730]
Content-Transfer-Encoding: [Binary]
Content-Type: [application/ocsp-response]
Date: [Mon, 20 Feb 2017 23:59:24 GMT]
Etag: ["1e962933088ed335a0dd104e96dc4bb23cae258c"]
Expires: [Wed, 22 Feb 2017 11:47:19 GMT]
Last-Modified: [Mon, 20 Feb 2017 23:47:19 GMT]
P3p: [CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"]
Server: [Apache]
  • OCSP signing certificate is already valid
  • OCSP signing certificate is not expired
  • OCSP signing certificate does not expire before NextUpdate
  • OCSP signing certificate does contain the Extended Key Usage for OCSP Signing
  • OCSP signing certificate does contain the OCSP No Check extension
  • Content-Type in response is set to 'application/ocsp-response'
  • Response is already valid
  • Response is not expired
  • Revocation information is updated at least once every twelve months
  • The value of the NextUpdate field is not more than twelve months beyond the value of the ThisUpdate field
  • Last-Modified header is the same as ThisUpdate (RFC 5019, section 6.2)
  • NextUpdate is after the date in the Expires cache header
  • The Cache-Control max-age header does not outlive NextUpdate
  • ThisUpdate has a date before NextUpdate
  • Expires cache header is the same as the NextUpdate field (RFC 5019 section 6.2)
This OCSP response was cached at
http://ocsp.godaddy.com/ (POST)Good

OCSP response information

Source: Authority Information Access in Certificate
Location: http://ocsp.godaddy.com/ (POST)
Size: 1730 bytes (DER data)
Response time: 44.757163ms
Signature algorithm: SHA1WithRSA
Signature type: CA Deligated
Signed by: Go Daddy Root Validation Authority - G2
Issued by: Go Daddy Root Certificate Authority - G2
Signing certificate validity: 2016-12-13 - 2017-12-13
Signing certificate algorithm: SHA256-RSA
Reported statuses: 1
This update:
Next update:
Produced at:
Status: Good

Relevant server response headers

Date:
Last Modified:
Expires:
Cache Control Max-age: 34h0m31s

Server and network information

Server Software: Apache

Raw OCSP request (PEM encoded)

-----BEGIN OCSP REQUEST-----
MEIwQDA+MDwwOjAJBgUrDgMCGgUABBQdI2+OBkuXH93foRUj4a7lAr4rGwQUOpqF
BxBnKLbv9r0FQW4gwZTaD94CAQc=
-----END OCSP REQUEST-----

Raw OCSP response (PEM encoded)

-----BEGIN OCSP RESPONSE-----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-----END OCSP RESPONSE-----

Raw OCSP Signing Certificate (PEM encoded)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Raw OCSP response headers

Cache-Control: [max-age=122431, public, no-transform, must-revalidate]
Content-Length: [1730]
Content-Transfer-Encoding: [Binary]
Content-Type: [application/ocsp-response]
Date: [Mon, 20 Feb 2017 23:59:24 GMT]
Etag: ["1e962933088ed335a0dd104e96dc4bb23cae258c"]
Expires: [Wed, 22 Feb 2017 11:47:19 GMT]
Last-Modified: [Mon, 20 Feb 2017 23:47:19 GMT]
P3p: [CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"]
Server: [Apache]
  • OCSP signing certificate is already valid
  • OCSP signing certificate is not expired
  • OCSP signing certificate does not expire before NextUpdate
  • OCSP signing certificate does contain the Extended Key Usage for OCSP Signing
  • OCSP signing certificate does contain the OCSP No Check extension
  • Content-Type in response is set to 'application/ocsp-response'
  • Response is already valid
  • Response is not expired
  • Revocation information is updated at least once every twelve months
  • The value of the NextUpdate field is not more than twelve months beyond the value of the ThisUpdate field
  • Last-Modified header is the same as ThisUpdate (RFC 5019, section 6.2)
  • NextUpdate is after the date in the Expires cache header
  • The Cache-Control max-age header does not outlive NextUpdate
  • ThisUpdate has a date before NextUpdate
  • Expires cache header is the same as the NextUpdate field (RFC 5019 section 6.2)

Go Daddy Root Certificate Authority - G2 (CA Certificate)

This certificate was cached at
Certificate details for Go Daddy Root Certificate Authority - G2 (At position 2 in certificate chain)
Serial number:
hex: 0
int: 0
Issued by: Go Daddy Root Certificate Authority - G2
Public Key Algorithm: RSA
Not valid before:
Not valid after:
Organization: GoDaddy.com, Inc.
State / Province: Arizona
Locality: Scottsdale
Country: US
  • This certificate does not contain any links to an LDAP server
  • This certificate does not contain any internal server links
  • This certificate does not contain any links with an unknown format

This is a self signed certificate

Check the revocation status for another website

Created by Paul van Brouwershaven
Revoked certificates can't and should not be trusted, these certificate will cause errors like "NET::ERR_CERT_REVOKED" in browsers.