certificate error on Vodafone

I’ve got a user reporting an invalid certificate when accessing the domain for hosted Cloudflare videos. On further inspection of the certificate being issued it presents as:

Clearly this is Vodafone performing some kind of MITM cert injection which they have misconfigured. Is anyone else experiencing this?

After more investigation this seems to be an HSTS related error. I assume at some point they didn’t MITM the certificate and the user accessed the site. Now they’ve injected their own cert and it’s breaking.

This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.