Title: We run a backend API app on Heroku and for simplicity our frontend calls it via the herokuapp.com subdomain `&lt;our-app-name&gt;.herokuapp.com`.<p>We haven&#x27;t bothered with a custom domain SSL certificate as the herokuapp.com subdomain has been just fine.<p>Fortunately I was monitoring the endpoint as I started getting SSL expiry warnings a few weeks ago.<p>It seems heroku is serving an old certificate for &lt;our-app-name&gt;.herokuapp.com, issued April 2019 and expiring 22nd June:<p>```
$ curl -v --head https:&#x2F;&#x2F;&lt;our-app-name&gt;.herokuapp.com&#x2F;
* Connected to &lt;our-app-name&gt;.herokuapp.com (52.19.225.66) port 443 (#0)
[snip]
* Server certificate:
*  expire date: Jun 22 12:00:00 2020 GMT
*  subjectAltName: host &quot;&lt;our-app-name&gt;.herokuapp.com&quot; matched cert&#x27;s &quot;<i>.herokuapp.com&quot;
</i>  issuer: C=US; O=DigiCert Inc; OU=www.digicert.com; CN=DigiCert SHA2 High Assurance Server CA
```<p>It&#x27;s a wildcard cert for <i>.herokuapp.com but it&#x27;s different from the current one I see if I curl the root domain:<p>```
$ curl -v --head https:&#x2F;&#x2F;herokuapp.com&#x2F;
</i> Connected to herokuapp.com (34.194.84.166) port 443 (#0)
* Server certificate:
*  expire date: Aug  2 02:13:11 2020 GMT
*  issuer: C=US; O=Let&#x27;s Encrypt; CN=Let&#x27;s Encrypt Authority X3<p>```<p>It seems they&#x27;ve transitioned to Let&#x27;s Encrypt for the wildcard domain, but it isn&#x27;t being served for app subdomains. I&#x27;ve checked a few other subdomains and see the same thing:<p>* govuk-prototype-kit.herokuapp.com
* heroku-status.herouapp.com
* juice-shop.herokuapp.com<p>I&#x27;ve been raising this with support since T-30 and they just keep saying things like:<p>&gt; Our concerned team is aware of it and they are actively working on the renewal process. We&#x27;ll get the new cert in there well before the expiration, and there will be no disruption of service.<p>Now we&#x27;re at 7 days I&#x27;ve lost confidence that support has even forwarded my ticket to the right team.<p>I suspect in 7 days we&#x27;re gonna see a lot of things break...
Upvote: