new.museScore.org subdomain — Not Private / Invalid certificate

• Apr 28, 2024 - 19:32

On MacOS, using Safari, searching with DuckDuckGo I often get results showing new.museScore.org

Here's an example search result:
      DuckDuck query result.png
Clicking that result posts an alert
      Not Private - Alert on clicking newDOTMuseScore.png
Should I be concerned?

So why search with DuckDuckGo? Intra-site search is the bane of the Internet and the MuseScore.org site is no exception. Interestingly a Google search does not lead to the Not Private / Invalid certificate alert shown above.

And here's the certificate info

      New_Musescore site certificate.png


Comments

In reply to by frfancha

As you can see in the certificate info above, the certificate has been issued for
Common Name: musescore.org
This does not include new.musescore.org
They should have used a SAN with a wildcard *.musescore.org in the certificate.
(and if it is only for testing, the webserver should be configured to exclude the subdomain from google crawling)

Do you still have an unanswered question? Please log in first to post your question.