Expired SSL certificate on GitHub pages

Hi,

My personal blog www.twiecki.io (GH pages link: twiecki.github.io) has an expired SSL certificate. I thought it would get updated automatically but it’s been over 1 week.

Any ideas?

Best,
Thomas

Hello,

A DNS change triggered a certificate renewal attempt for your site.

In your case, it seems an invalid IP address has been added to your domain: 162.255.119.56.

This looks to be from Namecheap and it has been causing few issues recently. It could have been added if you tried to setup some HTTP redirections there.

Removing the invalid IP should clear the situation and help with the certificate renewal.

Thanks @yoannchaudet. However, I don’t see a redirect or that IP somewhere (I posted the screenshot from namecheap above). Do you see anything wrong there?

@twiecki I suggest you reach out to Namecheap to ask them where 162.255.119.56 is coming from. It is currently an A record on your domain (twiecki.io) which is preventing GitHub Pages from requesting a TLS certificate for it.

I expect that IP address may be for a Namecheap parking page. While I’m not familiar with the Namecheap DNS management interface, looking at the following article on their help site it appears that you can disable it from the Other Domain Settings section:

1 Like

I reached out to them but don’t have the sense they know what’s going on. They suggested I remove the CNAME www record, but that doesn’t seem right, does it?

@slgraff I did disable it, does that take time to take effect? How can a new cert be issued?

I also removed the www redirect which seems to have fixed it:

Does a new one get issued automatically?

Visiting the Pages settings page would have been enough to trigger the certificate request. This is where we do a DNS check and queue up certificate renewal/re-provisioning when we detect changes.

I kicked off a renewal manually and it was approved. Within 10 minutes the certificate will be available in the CDN.

Something is funky with Namecheap lately. We do support www variant of certificates nowadays. In any cases your DNS is looking great now.

1 Like

I had a samilar issue with the Github pages. I used to redirect the Github page to a custom domain bought on Namecheap but I didn’t renew it this year. However, the Github page still redirects to the expired domain and I can’t turn on the “Parking Page” on the namecheap since my domain is already expired. Any idea to solve the redirect problem?