Quiz: TLS

Question 2 of 10

Read the output

The certificate was issued yesterday, yet curl on this machine refuses it. What is wrong?

$ curl https://secure.lab.test/
curl: (60) SSL certificate problem: certificate is not yet valid
$ openssl x509 -in /etc/nginx/tls/secure.crt -noout -dates
notBefore=Oct 19 09:00:00 2026 GMT
notAfter=Jan 17 09:00:00 2027 GMT
$ date
Sun Jan  4 12:00:00 UTC 2026

The certificate was issued for another name.
The certificate's issuer is not in the trust store.
The certificate has expired.
The machine's clock is behind — by it, the certificate's validity has not started yet.

Back A–D or ↵ Sign in to answer