# SSL certificate doesn't match circleci.com

**URL:** <https://discuss.circleci.com/t/ssl-certificate-doesnt-match-circleci-com/396>\
**Category:** Bug Reports\
**Created:** [November 5, 2015, 7:32pm UTC](https://discuss.circleci.com/t/ssl-certificate-doesnt-match-circleci-com/396 "2015-11-05T19:32:04Z")\
**Posts on this page:** 9\
**Page:** 1

<div class="post-metadata">

**Author:** ![joeyAghion](https://sea2.discourse-cdn.com/circleci/user_avatar/discuss.circleci.com/joeyaghion/32/272_2.png) [@joeyAghion](https://discuss.circleci.com/u/joeyAghion)\
**Post date:** [November 5, 2015, 7:32pm UTC](https://discuss.circleci.com/t/ssl-certificate-doesnt-match-circleci-com/396/1 "2015-11-05T19:32:04Z")

</div>

When I visit [circleci.com](http://circleci.com), I get a “Your connection is not private” error in Chrome. The SSL certificate details list a \*.enbrite.ly as the certificate’s host name. I get a similar error in Chrome.

I realize that others aren’t necessarily experiencing this and that it may be a problem with my upstream internet provider, but I wanted to post here in case you have suggestions or others encounter it as well.

---

<div class="post-metadata">

**Author:** ![drazisil](https://sea2.discourse-cdn.com/circleci/user_avatar/discuss.circleci.com/drazisil/32/24029_2.png) [@drazisil](https://discuss.circleci.com/u/drazisil)\
**Post date:** [November 5, 2015, 7:43pm UTC](https://discuss.circleci.com/t/ssl-certificate-doesnt-match-circleci-com/396/2 "2015-11-05T19:43:37Z")

</div>

I’m thinking that it’s an upstream issue.

Do you happen to have an example url that others can check?

Also, are you running an ad blocker, just in case it’s an issue with a weird ad or tracker?

---

<div class="post-metadata">

**Author:** ![joeyAghion](https://sea2.discourse-cdn.com/circleci/user_avatar/discuss.circleci.com/joeyaghion/32/272_2.png) [@joeyAghion](https://discuss.circleci.com/u/joeyAghion)\
**Post date:** [November 5, 2015, 7:59pm UTC](https://discuss.circleci.com/t/ssl-certificate-doesnt-match-circleci-com/396/3 "2015-11-05T19:59:04Z")

</div>

Sure. I have this problem when I visit the home page: [https://circleci.com/](https://circleci.com/)

I’m not running any ad-blocker. Furthermore my Safari is usually unused and has a completely default set-up, but encounters the same problem.

---

<div class="post-metadata">

**Author:** ![drazisil](https://sea2.discourse-cdn.com/circleci/user_avatar/discuss.circleci.com/drazisil/32/24029_2.png) [@drazisil](https://discuss.circleci.com/u/drazisil)\
**Post date:** [November 5, 2015, 9:14pm UTC](https://discuss.circleci.com/t/ssl-certificate-doesnt-match-circleci-com/396/4 "2015-11-05T21:14:32Z")

</div>

Here’s what my chrome says:

 ![](https://global.discourse-cdn.com/circleci/original/1X/b4f4c1701da08a32c832660b6f79050a157ddbad.png)

Can you take a look at yours and see what it says? You can get this by clicking on the padlock.

---

<div class="post-metadata">

**Author:** ![joeyAghion](https://sea2.discourse-cdn.com/circleci/user_avatar/discuss.circleci.com/joeyaghion/32/272_2.png) [@joeyAghion](https://discuss.circleci.com/u/joeyAghion)\
**Post date:** [November 5, 2015, 9:16pm UTC](https://discuss.circleci.com/t/ssl-certificate-doesnt-match-circleci-com/396/5 "2015-11-05T21:16:37Z")

</div>

![](https://global.discourse-cdn.com/circleci/original/1X/dc2b9067abae4fe545fb265ba81f8b78b6fea57b.png)

---

<div class="post-metadata">

**Author:** ![drazisil](https://sea2.discourse-cdn.com/circleci/user_avatar/discuss.circleci.com/drazisil/32/24029_2.png) [@drazisil](https://discuss.circleci.com/u/drazisil)\
**Post date:** [November 5, 2015, 9:24pm UTC](https://discuss.circleci.com/t/ssl-certificate-doesnt-match-circleci-com/396/6 "2015-11-05T21:24:41Z")

</div>

Right.

Well, that’s not good.

Do a ping for me please and tell us what ip it’s trying for [circleci.com](http://circleci.com)?

It should be one of these 4:

[circleci.com](http://circleci.com). 16 IN A 54.173.216.204  
[circleci.com](http://circleci.com). 16 IN A 52.3.180.143  
[circleci.com](http://circleci.com). 16 IN A 54.210.65.233  
[circleci.com](http://circleci.com). 16 IN A 54.86.168.154

---

<div class="post-metadata">

**Author:** ![joeyAghion](https://sea2.discourse-cdn.com/circleci/user_avatar/discuss.circleci.com/joeyaghion/32/272_2.png) [@joeyAghion](https://discuss.circleci.com/u/joeyAghion)\
**Post date:** [November 5, 2015, 9:40pm UTC](https://discuss.circleci.com/t/ssl-certificate-doesnt-match-circleci-com/396/7 "2015-11-05T21:40:37Z")

</div>

Thanks for helping me narrow this down. I got the correct response from `nslookup` and `dig`, but a `ping` hit the wrong IP:

```auto
$ nslookup circleci.com
Server: 192.168.1.1
Address:	192.168.1.1#53

Non-authoritative answer:
Name:	circleci.com
Address: 52.3.180.143
Name:	circleci.com
Address: 54.210.65.233
Name:	circleci.com
Address: 54.173.216.204
Name:	circleci.com
Address: 54.86.168.154
$ ping circleci.com
PING circleci.com (52.21.178.223): 56 data bytes
...

```

I reset my local DNS cache and started to resolve to the right IP:

```auto
$ sudo killall -HUP mDNSResponder
$ ping circleci.com
PING circleci.com (54.210.65.233): 56 data bytes
...

```

In Chrome, I had to go to net-internals and hit the _Clear host cache_ button, after which I started to reach the site correctly.

Thanks again!

---

<div class="post-metadata">

**Author:** ![drazisil](https://sea2.discourse-cdn.com/circleci/user_avatar/discuss.circleci.com/drazisil/32/24029_2.png) [@drazisil](https://discuss.circleci.com/u/drazisil)\
**Post date:** [November 5, 2015, 9:41pm UTC](https://discuss.circleci.com/t/ssl-certificate-doesnt-match-circleci-com/396/8 "2015-11-05T21:41:58Z")

</div>

Awesome! Glad to hear you got it sorted!

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/circleci/original/3X/5/1/511608acda8e85906e15909b57bd0a46c1dbe291.png) [@system](https://discuss.circleci.com/u/system)\
**Post date:** [June 18, 2018, 11:33am UTC](https://discuss.circleci.com/t/ssl-certificate-doesnt-match-circleci-com/396/9 "2018-06-18T11:33:53Z")

</div>


