The difficulty of making sure your website is broken (letsencrypt.org)

https://badssl.com/ also offers several test subdomains in the same vein.

Meanwhile HTTP keeps working just fine and is decentralized.

Just "add your own crypto" on top, which is the ONLY thing a sane person would do.

3... 2... 1... banned?

Interesting. Chrome (146, macOS) shows no error messages on the revoked cert pages, but Firefox does (also macOS).

Vanadium, Chrome and Firefox (all for Android) all accept all the revoked certificates... But revoked.badssl.com is considered revoked

In the same direction, I once wanted to test an embedded device on crap wifi.

So I just ordered the cheapest AP I could find.

Except the damn device worked perfectly. Slow but rock solid.

One of our testers at $CURRENT_JOB also has trouble simulating a crap network, because our network is good.

Notice how your browser happily accepts the expired certificates :)