Microsoft forgot to renew certificate for Windows Insider • The Register


Microsoft forgot to renew the certificate for its Windows Insider Software Testing Program webpage.

Attempting to visit the Windows Insider Portal returned the familiar “Your connection is not private” warning – as if web pages filled with scripts and trackers could really be called “private”. The issue has now been resolved and someone’s ears are probably full of it.

Browsers like Chrome, Firefox, and Safari will attempt to deter visitors from accessing the web page, but provide a link for those who ignore warnings and persist in clicking advanced options.

We did it and lived to tell about it.

The Insider web page certificate expired on Thursday, June 9, 2022 at 4:59:59 p.m. Pacific Daylight Time.

Expired Microsoft certificate

Click to enlarge

Microsoft did not immediately respond to a request for comment. But clicking on the warnings on Firefox first brought this reporter to Microsoft’s main Windows page with 302 and 307 redirect responses – Microsoft redirects requests to its expired page and is therefore aware of the problem.

This kind of snafu happens from time to time. In November 2021, an expired certificate affected Windows 11 version 21H2 – it prevented Windows users from opening certain applications like the snipping tool.

And in 2020, an expired authentication certificate prevented customers from accessing Microsoft Teams.

Certificate expirations tend to be worse when affecting root certificates and bork services for multiple vendors and customers. The expiration of Sectigo’s AddTrust legacy root certificate two years ago affected thousands of customers.

They are also rather disruptive when they occur at telecoms companies, the Ericsson certificate expiry in 2018 which hampered communications between tens of millions of UK customers.

Maybe Windows scheduling systems aren’t all they’re made out to be. ®


Comments are closed.