# SSL certificate from cloudfront content

**URL:** https://meta.discourse.org/t/ssl-certificate-from-cloudfront-content/77494
**Category:** Site feedback
**Created:** [January 8, 2018, 6:12pm UTC](https://meta.discourse.org/t/ssl-certificate-from-cloudfront-content/77494 "2018-01-08T18:12:02Z")
**Posts on this page:** 3
**Page:** 1

<div class="post-metadata">

### Author: ![dnsmichi](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/dnsmichi/32/379505_2.png) [@dnsmichi](https://meta.discourse.org/u/dnsmichi)
#### Post date: [January 8, 2018, 6:12pm UTC](https://meta.discourse.org/t/ssl-certificate-from-cloudfront-content/77494/1 "2018-01-08T18:12:02Z")

</div>

Hi,

while browsing with dev tools in Chrome opened back here, I recognised a warning like this in the console:

```plaintext
The SSL certificate used to load resources from https://d11a6trkgmumsb.cloudfront.net will be distrusted in M70. Once distrusted, users will be prevented from loading these resources. See https://g.co/chrome/symantecpkicerts for more information.

```

 ![09](https://global.discourse-cdn.com/meta/original/3X/3/0/30eaf2b472be414c66465594e15fcbce9039681f.png)

By the end of 2018, this might break meta with Chrome 70. I do see that it is Amazon Cloudfront with a Wildcard certificate issued by Symtantec.

```plaintext
michi@mbmif ~/coding/icinga/icinga2 (master *=) $ openssl s_client -connect d11a6trkgmumsb.cloudfront.net:443
...
subject=/C=US/ST=Washington/L=Seattle/O=Amazon.com, Inc./CN=*.cloudfront.net
issuer=/C=US/O=Symantec Corporation/OU=Symantec Trust Network/CN=Symantec Class 3 Secure Server CA - G4

```

So I am guessing that Amazon will take action soon enough, but who knows 🙂

Kind regards,  
Michael

---

<div class="post-metadata">

### Author: ![mpalmer](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/mpalmer/32/45740_2.png) [@mpalmer](https://meta.discourse.org/u/mpalmer)
#### Post date: [January 8, 2018, 9:07pm UTC](https://meta.discourse.org/t/ssl-certificate-from-cloudfront-content/77494/2 "2018-01-08T21:07:31Z")

</div>

Yep, I’m quite confident Amazon will have switched away from the soon-to-be-distrusted Symantec root by the end of the year, given that they’re a CA of their own now.

---

<div class="post-metadata">

### Author: ![mpalmer](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/mpalmer/32/45740_2.png) [@mpalmer](https://meta.discourse.org/u/mpalmer)
#### Post date: [January 8, 2018, 9:07pm UTC](https://meta.discourse.org/t/ssl-certificate-from-cloudfront-content/77494/3 "2018-01-08T21:07:34Z")

</div>