On: Expired SSL Certificate at GitHub

[dz0ny]

Looks like they tried to rotate the cert, maybe due to the private key leak. But instead, they rolled the wrong expired key to all content domains.

[AviationAtom → dz0ny]

I'm more thinking the new host key prevented SSL cert rotation from happening properly

[orra → AviationAtom]

Maybe, but only if they're refreshing certificates less than a day before expiry. Which isn't ideal.