When I try
git clone https://github.com/xixi-cathy/regX.gitIt returns an error shows "fatal: SSL: certificate subject name (*.inkafactura.com) does not match target host name 'github.com'".I investigated whether an external proxy was being used(like "echo $https_proxy"), but the results obtained still cannot rule out the possibility that no external proxy was employed.Belows are my curl and openssl output:
~$ curl -vI https://github.com* Host github.com:443 was resolved.* IPv6: (none)* IPv4: 140.82.11.4* Trying 140.82.11.4:443...* Connected to github.com (140.82.11.4) port 443* ALPN: curl offers h2,http/1.1* TLSv1.3 (OUT), TLS handshake, Client hello (1):* CAfile: /home/lc/miniconda3/ssl/cacert.pem* CApath: none* TLSv1.3 (IN), TLS handshake, Server hello (2):* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):* TLSv1.3 (IN), TLS handshake, Certificate (11):* TLSv1.3 (IN), TLS handshake, CERT verify (15):* TLSv1.3 (IN), TLS handshake, Finished (20):* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):* TLSv1.3 (OUT), TLS handshake, Finished (20):* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519 / RSASSA-PSS* ALPN: server accepted http/1.1* Server certificate:* subject: CN=*.inkafactura.com* start date: Mar 24 03:53:24 2025 GMT* expire date: Jun 22 03:53:23 2025 GMT* subjectAltName does not match github.com* SSL: no alternative certificate subject name matches target host name 'github.com'* Closing connection* TLSv1.3 (OUT), TLS alert, close notify (256):curl: (60) SSL: no alternative certificate subject name matches target host name 'github.com'More details here: https://curl.se/docs/sslcerts.htmlcurl failed to verify the legitimacy of the server and therefore could notestablish a secure connection to it. To learn more about this situation andhow to fix it, please visit the web page mentioned above.~$ openssl s_client -connect github.com:443 -showcerts 2>/dev/null | openssl x509 -noout -textCertificate: Data: Version: 3 (0x2) Serial Number: 05:cf:98:68:ce:83:97:ab:d6:ac:f5:1e:5d:0e:57:c3:c8:67 Signature Algorithm: sha256WithRSAEncryption Issuer: C=US, O=Let's Encrypt, CN=R11 Validity Not Before: Mar 24 03:53:24 2025 GMT Not After : Jun 22 03:53:23 2025 GMT Subject: CN=*.inkafactura.com Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:aa:7b:6e:01:1f:ca:1e:d1:d3:f0:ae:c3:d9:b9: 3d:da:b7:ba:3b:c0:4b:fb:1c:75:7a:d2:aa:1c:00: d0:05:8e:78:b3:ef:d9:08:73:08:cd:98:0b:e7:43: f7:60:ec:8e:78:02:3c:ea:5e:51:d5:13:32:0c:52: 89:8c:2d:fe:c5:a4:72:0d:7a:2b:2a:93:38:a9:f3: 62:fd:79:66:5a:a8:ae:e0:5f:70:df:42:1a:51:1b: 00:b0:cc:db:ce:57:ba:3a:7d:bb:45:21:4f:32:66: 03:02:f8:3b:db:3e:02:a4:e7:be:31:d4:49:40:79: 00:3b:03:05:ae:4e:b9:f1:30:ee:a6:8e:8e:49:2c: 24:3e:71:b4:4d:4d:23:80:6d:ed:ad:d2:f3:6a:6c: f4:6a:9f:3d:72:77:86:63:8a:79:37:62:21:27:24: bb:02:27:4c:94:86:5c:1d:34:8f:84:a7:b7:86:12: 89:03:89:4a:1b:ab:ec:35:52:47:9f:45:2d:78:89: 41:d0:7b:ed:ce:07:eb:7e:31:6b:85:3d:e4:33:3a: 59:12:6a:13:25:f5:c5:e2:25:33:a0:15:46:42:43: 15:a0:f3:35:0d:00:14:64:a8:5e:db:68:16:c0:5f: 3f:b0:c3:92:e9:8c:d5:50:13:5d:65:25:31:98:1c: f6:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Key Usage: critical Digital Signature, Key Encipherment X509v3 Extended Key Usage: TLS Web Server Authentication, TLS Web Client Authentication X509v3 Basic Constraints: critical CA:FALSE X509v3 Subject Key Identifier: AC:A2:56:A1:54:B5:66:CB:EC:57:43:C4:58:10:CB:A1:67:36:EC:E1 X509v3 Authority Key Identifier: C5:CF:46:A4:EA:F4:C3:C0:7A:6C:95:C4:2D:B0:5E:92:2F:26:E3:B9 Authority Information Access: OCSP - URI:http://r11.o.lencr.org CA Issuers - URI:http://r11.i.lencr.org/ X509v3 Subject Alternative Name: DNS:*.inkafactura.com, DNS:inkafactura.com X509v3 Certificate Policies: Policy: 2.23.140.1.2.1 X509v3 CRL Distribution Points: Full Name: URI:http://r11.c.lencr.org/104.crl CT Precertificate SCTs: Signed Certificate Timestamp: Version : v1 (0x0) Log ID : E6:D2:31:63:40:77:8C:C1:10:41:06:D7:71:B9:CE:C1: D2:40:F6:96:84:86:FB:BA:87:32:1D:FD:1E:37:8E:50 Timestamp : Mar 24 04:51:54.781 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:85:50:5A:DD:EC:2D:97:76:CA:98:9F: F9:A0:4D:46:3C:96:54:47:1A:96:E9:EA:12:B2:0B:72: 4B:97:35:73:98:02:20:3F:7D:0E:EC:6B:F9:F8:A5:AA: 0F:81:A1:CC:A3:23:64:26:78:DD:44:84:83:39:00:78: 24:77:A7:13:76:ED:33 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : CF:11:56:EE:D5:2E:7C:AF:F3:87:5B:D9:69:2E:9B:E9: 1A:71:67:4A:B0:17:EC:AC:01:D2:5B:77:CE:CC:3B:08 Timestamp : Mar 24 04:51:54.845 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:23:4F:64:F1:8A:C3:08:E7:94:12:1F:DD: 07:EA:C5:86:9A:F6:AC:23:AD:50:2D:FF:53:B5:3A:C0: 93:3E:DB:F7:02:21:00:B2:BF:30:83:FC:00:47:DF:65: E5:4A:05:DD:3E:AC:B5:B3:EC:EB:1D:A0:BB:56:4C:A5: A1:36:A8:95:CD:EE:B8 Signature Algorithm: sha256WithRSAEncryption Signature Value: b3:67:ab:20:6a:32:8d:a0:21:02:b7:bf:86:8a:26:fc:e5:e8: c1:95:87:7c:63:56:5b:77:78:83:95:d4:49:5d:d8:65:f7:d2: 90:6d:84:39:54:0d:d3:a1:50:4f:f0:87:20:5e:a7:f0:77:65: b2:35:29:fb:02:c2:08:4a:a5:09:ce:6e:fb:5c:fc:98:ae:0d: c5:79:86:f7:d7:01:55:81:3f:6a:70:7d:81:26:4b:45:b7:5d: f5:f1:cb:28:8f:55:54:42:b4:01:d8:e0:e9:84:eb:ee:20:dd: 5d:9d:84:ef:7d:b2:05:ff:67:9c:3e:72:0e:26:c1:01:55:3a: eb:aa:c5:87:61:9e:99:f2:3c:01:e4:9f:54:75:f4:c6:7b:99: 79:85:ac:28:88:3e:df:af:6a:3c:73:8d:14:a6:d1:43:a1:31: a9:27:3c:39:60:f3:02:94:1b:64:54:f8:47:e5:df:e1:cf:35: 3c:8c:24:d3:26:bd:6c:e4:88:55:a8:70:d5:e8:1e:28:79:80: 5f:dd:b3:f5:be:03:32:39:57:20:8f:63:cb:61:6b:1b:ab:c3: 3c:0e:92:e2:87:82:03:47:56:b7:db:26:92:65:de:1c:86:49: 76:c2:e0:56:4f:8d:dc:bf:a4:bb:6a:4f:0d:cf:2b:60:ee:2e: fe:1a:8b:b4~$ dig github.com; <<>> DiG 9.18.30-0ubuntu0.22.04.2-Ubuntu <<>> github.com;; global options: +cmd;; Got answer:;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 51473;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1;; OPT PSEUDOSECTION:; EDNS: version: 0, flags:; udp: 1232;; QUESTION SECTION:;github.com. IN A;; ANSWER SECTION:github.com. 31 IN A 20.205.243.166;; Query time: 13 msec;; SERVER: 8.8.8.8#53(8.8.8.8) (UDP);; WHEN: Tue May 13 12:42:25 CST 2025;; MSG SIZE rcvd: 55