Google TLS server certificate no longer trusted
Detailed description of the issue. Put as much information as you can, potentially with images showing the issue.
I can no longer view my Google calendars in Evolution or GNOME Calendar. I get this warning:
Here are the certificate details
*.googleusercontent.com
Identity: *.googleusercontent.com
Verified by: GTS CA 1O1
Expires: 02/09/20
Subject Name
C (Country): US
ST (County): California
L (Locality): Mountain View
O (Organisation): Google LLC
CN (Common Name): *.googleusercontent.com
Issuer Name
C (Country): US
O (Organisation): Google Trust Services
CN (Common Name): GTS CA 1O1
Issued Certificate
Version: 3
Serial Number: 00 F6 6B 05 F8 D7 78 99 38 08 00 00 00 00 46 74 91
Not Valid Before: 2020-06-10
Not Valid After: 2020-09-02
Certificate Fingerprints
SHA1: 92 08 5B 5A 13 66 F9 28 BF 94 86 32 1B 74 EE 24 73 C0 6A 42
MD5: 3A 33 54 EC C3 07 12 B7 AF A8 EB 22 3F D2 1B ED
Public Key Info
Key Algorithm: Elliptic Curve
Key Parameters: 06 08 2A 86 48 CE 3D 03 01 07
Key Size: 256
Key SHA1 Fingerprint: 0C F2 80 00 A2 94 06 AD C0 C5 8A 2B 2E 51 79 13 B1 7B A9 6D
Public Key: 04 14 30 AC 36 A4 64 82 32 80 9A 5A D3 0B 48 38 ED 02 BD 22 F9 C1 74 22 AB 5D C2 AB 4C 85 8E C9 C5 6C B4 41 31 1C 5B 65 A0 C2 57 DA 8D 94 27 C7 D9 7B 5E 5A 6F 58 EA C6 C3 28 86 95 48 8F 89 12 91
Key Usage
Usages: Digital signature
Critical: Yes
Extended Key Usage
Allowed Purposes: Server Authentication
Critical: No
Basic Constraints
Certificate Authority: No
Max Path Length: Unlimited
Critical: Yes
Subject Key Identifier
Key Identifier: 13 85 30 3B AB B1 76 01 FD 64 D4 EE D6 C4 DD FE 96 1E 3B 58
Critical: No
Extension
Identifier: 2.5.29.35
Value: 30 16 80 14 98 D1 F8 6E 10 EB CF 9B EC 60 9F 18 90 1B A0 EB 7D 09 FD 2B
Critical: No
Extension
Identifier: 1.3.6.1.5.5.7.1.1
Value: 30 5A 30 2B 06 08 2B 06 01 05 05 07 30 01 86 1F 68 74 74 70 3A 2F 2F 6F 63 73 70 2E 70 6B 69 2E 67 6F 6F 67 2F 67 74 73 31 6F 31 63 6F 72 65 30 2B 06 08 2B 06 01 05 05 07 30 02 86 1F 68 74 74 70 3A 2F 2F 70 6B 69 2E 67 6F 6F 67 2F 67 73 72 32 2F 47 54 53 31 4F 31 2E 63 72 74
Critical: No
Subject Alternative Names
DNS: *.googleusercontent.com
DNS: *.apps.googleusercontent.com
DNS: *.appspot.com.storage.googleapis.com
DNS: *.audiobook-additional-material-staging.googleusercontent.com
DNS: *.audiobook-additional-material.googleusercontent.com
DNS: *.blogspot.com
DNS: *.bp.blogspot.com
DNS: *.commondatastorage.googleapis.com
DNS: *.composer-dev.googleusercontent.com
DNS: *.composer-qa.googleusercontent.com
DNS: *.composer-staging.googleusercontent.com
DNS: *.composer.googleusercontent.com
DNS: *.content-storage-download.googleapis.com
DNS: *.content-storage-upload.googleapis.com
DNS: *.content-storage.googleapis.com
DNS: *.datafusion-api-dev.googleusercontent.com
DNS: *.datafusion-api-staging.googleusercontent.com
DNS: *.datafusion-api.googleusercontent.com
DNS: *.datafusion-dev.googleusercontent.com
DNS: *.datafusion-staging.googleusercontent.com
DNS: *.datafusion.googleusercontent.com
DNS: *.dataproc-staging.googleusercontent.com
DNS: *.dataproc-test.googleusercontent.com
DNS: *.dataproc.googleusercontent.com
DNS: *.dev.amp4mail.googleusercontent.com
DNS: *.doubleclickusercontent.com
DNS: *.fuchsia-updates-autopush-qual.googleusercontent.com
DNS: *.fuchsia-updates-autopush.googleusercontent.com
DNS: *.fuchsia-updates-dev.googleusercontent.com
DNS: *.fuchsia-updates-staging.googleusercontent.com
DNS: *.fuchsia-updates.googleusercontent.com
DNS: *.gcc.googleusercontent.com
DNS: *.ggpht.com
DNS: *.googledrive.com
DNS: *.googlesyndication.com
DNS: *.googleweblight.com
DNS: *.gsc.googleusercontent.com
DNS: *.notebooks.googleusercontent.com
DNS: *.pipelines.googleusercontent.com
DNS: *.playground-internal.amp4mail.googleusercontent.com
DNS: *.playground.amp4mail.googleusercontent.com
DNS: *.prod.amp4mail.googleusercontent.com
DNS: *.safeframe.googlesyndication.com
DNS: *.safenup.googleusercontent.com
DNS: *.sandbox.googleusercontent.com
DNS: *.storage-download.googleapis.com
DNS: *.storage-upload.googleapis.com
DNS: *.storage.googleapis.com
DNS: *.storage.select.googleapis.com
DNS: *.translate.goog
DNS: *.tuf-autopush.googleusercontent.com
DNS: *.tuf-dev.googleusercontent.com
DNS: *.tuf-staging.googleusercontent.com
DNS: *.tuf.googleusercontent.com
DNS: blogspot.com
DNS: bp.blogspot.com
DNS: commondatastorage.googleapis.com
DNS: doubleclickusercontent.com
DNS: ggpht.com
DNS: googledrive.com
DNS: googleusercontent.com
DNS: googleweblight.com
DNS: manifest.c.mail.googleusercontent.com
DNS: manifest.lh3-da.googleusercontent.com
DNS: manifest.lh3-db.googleusercontent.com
DNS: manifest.lh3-dc.googleusercontent.com
DNS: manifest.lh3-dd.googleusercontent.com
DNS: manifest.lh3-de.googleusercontent.com
DNS: manifest.lh3-df.googleusercontent.com
DNS: manifest.lh3-dg.googleusercontent.com
DNS: manifest.lh3-dz.googleusercontent.com
DNS: manifest.lh3.googleusercontent.com
DNS: manifest.lh3.photos.google.com
DNS: storage.googleapis.com
DNS: storage.select.googleapis.com
DNS: translate.goog
DNS: unfiltered.news
Critical: No
Extension
Identifier: 2.5.29.32
Value: 30 18 30 08 06 06 67 81 0C 01 02 02 30 0C 06 0A 2B 06 01 04 01 D6 79 02 05 03
Critical: No
Extension
Identifier: 2.5.29.31
Value: 30 2A 30 28 A0 26 A0 24 86 22 68 74 74 70 3A 2F 2F 63 72 6C 2E 70 6B 69 2E 67 6F 6F 67 2F 47 54 53 31 4F 31 63 6F 72 65 2E 63 72 6C
Critical: No
Extension
Identifier: 1.3.6.1.4.1.11129.2.4.2
Value: 04 81 F3 00 F1 00 76 00 F0 95 A4 59 F2 00 D1 82 40 10 2D 2F 93 88 8E AD 4B FE 1D 47 E3 99 E1 D0 34 A6 B0 A8 AA 8E B2 73 00 00 01 72 9D C4 7E 6A 00 00 04 03 00 47 30 45 02 20 33 65 09 4E 8B 7E 15 31 1E 9C 0C BF 64 19 EE 38 74 2F 29 C5 09 0D C3 F5 71 47 3B 89 51 88 B8 D8 02 21 00 93 91 EA 9A 0C B2 79 B8 12 52 C8 FF FC 1A AF E5 84 33 66 79 3E DA 08 13 89 CF 5A DE E0 15 05 DC 00 77 00 B2 1E 05 CC 8B A2 CD 8A 20 4E 87 66 F9 2B B9 8A 25 20 67 6B DA FA 70 E7 B2 49 53 2D EF 8B 90 5E 00 00 01 72 9D C4 7E 61 00 00 04 03 00 48 30 46 02 21 00 C3 B2 2D 93 4C 5F D1 23 57 32 12 1F 2D 95 36 DE 33 E6 D6 52 8C B4 D5 D0 D4 59 0F 77 37 E7 0C 46 02 21 00 D4 55 C9 5D 53 87 6A ED C6 37 6C 52 DC 37 F7 DC 59 A2 9E F8 08 98 3E 6B A4 94 86 93 D6 39 51 6E
Critical: No
Signature
Signature Algorithm: 1.2.840.113549.1.1.11
Signature Parameters: 05 00
Signature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
Here's the certificate exported by right-clicking on the _.googleusercontent.com.crt
Steps to reproduce:
- Wait for a while
- I guess when GNOME Shell or Evolution refreshes their calendars, gnome-calendar presents the dialog.