News for hackers. Stuff that matters.

M0

I've seen a (then) current version of Glassfish (java EE server) refuse to start because of an expired internal certificate a couple of years ago.

So here is one example: https://stackoverflow.com/questions/18248020/certificate-has...

They don't use cryptographic timestamps with their signatures ? The certificate might now be invalid, but the signatures were done at a time when it was valid...
This one is not encrypted. Its plaintext or compressed (gzip I think). Crypto is only for digital signatures.