Certificate Chain, negative days???

Richard G

Verified User
Joined
Jul 6, 2008
Messages
4,218
Location
Maastricht
I just checked a private domain of mine which has a valid and good working Letsencrypt certificat.
I used this site to check:
https://ssl-tools.net/mailservers/

The this was visible under Certificate Chain:
Code:
    privatedomain.nl
        -346 days remaining 4096 bit sha256WithRSAEncryption 
            Let's Encrypt Authority X3
                493 days remaining 2048 bit sha256WithRSAEncryption 
                    DST Root CA X3 (Certificate is self-signed.)
                        690 days remaining 2048 bit sha1WithRSAEncryption
Look at the first line which shows -346 days remaining??? I checked other domains and they differ from for example 70 days to 200 days remaing. But couldn't find other negative values so quickly.
How come this is a negative value?
It's also shown in red so I suppose it should not have a negative value. Is this pointing to a problem?
 
Top