Email Notification Links Not Working - Cert Error

[240vPlug]

I receive the following error when clicking on view thread from withing the mail notification.

NET::ERR_CERT_COMMON_NAME_INVALID

Here is a screenshot of the error. Has been happening for the past 48hr or so.

 

[danny]

Hi, can you please forward the email to [email protected]

Thank you.

 

[240vPlug]

Hi, can you please forward the email to [email protected]

Thank you.

Hi Danny yes I can forward it but it's happening with every email notification from TMC. The only way I can work around it is to open it in an incognito tab. Oddly it's only a problem on mobile. They work fine on my desktop.

 

[swaltner]

There's definitely a difference between the www.teslamotorsclub.com and email.teslamotorsclub.com SSL certificates, which the second having an invalid certificate currently because the server name isn't listed in the SAN section of the certificate.

I don't quite know why, but when I click on a link in my email client, I don't get a SSL certificate error, but if I try to go directly to the same server at https://email.teslamotorsclub.com, I get a certificate/SSL error. This is on macOS Ventura. Maybe Apple has programmed Safari on macOS to be a little sloppier on checking certificates on clicked links. I'm pretty sure I didn't add an exception on my Mac.

Oddly enough, on my iPhone, I get a similar certificate error like the one from the OP, presumably obtained on an Android phone.

The current SSL certificates are as follows:

www.teslamotorsclub.com
Serial Number:
0a:3b:7b:8e:02:49:43:73:df:7a:98:7f:f5:07:6a:15
Validity
Not Before: May 18 00:00:00 2022 GMT
Not After : May 18 23:59:59 2023 GMT
Subject: C=US, ST=California, L=San Francisco, O=Cloudflare, Inc., CN=sni.cloudflaressl.com
X509v3 Subject Alternative Name:
DNS:teslamotorsclub.com, DNS:*.teslamotorsclub.com, DNS:sni.cloudflaressl.com

email.teslamotorsclub.com
Serial Number:
04:23:ce:88:a8:e5:64:23:39:70:44:e4:a9:4e:bf:40:32:15
Validity
Not Before: Nov 16 13:35:11 2022 GMT
Not After : Feb 14 13:35:10 2023 GMT
Subject: CN=mailgun.org
X509v3 Subject Alternative Name:
DNS:mailgun.org

The SAN section on the second certificate doesn't list either email.teslamotorsclub.com or *.teslamotorsclub.com, which is why some browsers are throwing SSL certificate errors when trying to open the links sent in emails.

 

[240vPlug]

You are correct. It's on an Android device. When I click on advanced it shows it's an HSTS error.

 

[ken830]

Same issue for me for what feels like the last few days/weeks. This is really annoying being unable to visit any of the TMC links sent in email notifications.