In the wild - 6 day certs or IP certs for monitor testing

Client dev
1

Hi, I wasn't sure where to post this, as I couldn't find a general discussion.

I read recently about the 6 day certs and the IP certificates

Are there any versions of these in the wild that I could point my SSL monitor at?
It'd be a huge help to test it in advance with some real world examples.

Many thanks,
Peter

2

while it was done at staging, it's not on production yet so unlikely many are using it.
would https://[2602:ff3a:1:abad:c0f:fee:abad:cafe]/ work for you?
if you need your own site you can use LE staging to get your own

5 Likes
3

Thank you @orangepizza I'll try your bad coffee first :slight_smile:

1 Like
4

A post was split to a new topic: Certbot cert request fails for IP address in LE Staging

5

Would anyone else have am IPV6 certificate running a test 6 day cert?
I am hoping to set one up soon but probably can't till the weekend.

Feel free to PM me privately if you dont want it public.

Many thanks.

6

@orangepizza How did you manage to get a valid certificate on staging? Thought they would be invalid in normal browser clients till they hit production.

7

Thats correct - for the moment they are not valid but they're still useful for testing my SSL Monitoring app.

9

Thanks. Appreciate it.

1 Like
10

Hi Xstasy
Just want to check something. My SSL Monitor is showing this as a 90 day cert and not a 6 day cert. Just double checking it has changed from 6 days to 90.
Cheers
P

11

can you post the certificate you saw? 90 day IP certificate would be serious bug in boulder policy

2 Likes
12

Had to move it to: https://[2a01:799:15d1:8400::1111]/
Should be correct certificate now.

1 Like
13

Thanks @orangepizza. Top of the list :slightly_smiling_face:

chillssl
chillssl2482×1356 315 KB

BTW ignore the Status badges. I am adjusting for shorter life certs so I have more granular status categories.