Server Features » TLS Certificate » Hostname mismatch
TLS certificate status: Hostname mismatchPercentage of SSL/TLS servers with certificate status Hostname mismatch. Showing percentages by IRC server software.
About this test result: While connecting to server X we were offered a certificate of server Y. This will generate a certificate warning on the IRC client.
Note that some servers don't offer a valid certificate for their server name in which case we try to match it against the round robin name. We do this by resolving the certificate CN and any SAN's back to IP addresses to see if it matches the server. For wildcard DNS we do the same with some heuristics like irc.domain.tld. This test is not perfect in case of geotargetted DNS or wildcard certificates where irc.domain.tld is not in use. This test result may thus contain some false positives.
Note on statistics: there is a difference in the gathering of TLS servers between 2017-2019 and 2020-onwards, see SSL/TLS statistics on the data page.
TablePercentage of SSL/TLS servers with certificate status Hostname mismatch. Showing percentages by IRC server software.
|Software||Sep 2017||Dec 2018||Dec 2019||Dec 2020||Dec 2021|