presstv.ir website X509 certificate revoked? (thelemmy.club)

submitted 1 day ago* (last edited 1 day ago) by blobjim@hexbear.net to c/technology@hexbear.net

13 comments fedilink hide all child comments

Is this some US government funny business?

I hadn't even thought of this before as a really easy way to censor websites. Firefox doesn't allow viewing it at all.

Checked the reason. Listed as:

Serial number                                                   Revocation date           Reason
0x02295E6BB25717C4652321F4ED9D2B29  2026-07-06 13:54:09   Privileges Withdrawn

privilegeWithdrawn indicates that a certificate (public-key or attribute certificate) was revoked because a privilege contained within that certificate has been withdrawn.

whatever that means.

https://support.globalsign.com/ssl/general-information/tls-certificate-revocation-reasons says

privilegeWithdrawn (RFC 5280 CRLReason #9) - Note: This reason code can only be used by CA initiated revocations.

Seems like the US maybe pressured it as a sanctions compliance thing?

cert chain

https://www.presstv.ir/Detail/2026/07/07/771796/US-Israel-Gaza-Trump--

Peer’s Certificate has been revoked.

HTTP Strict Transport Security: false
HTTP Public Key Pinning: false

Certificate chain:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

top 13 comments

sorted by: hot top new old

[-] into_highest_invite@lemmygrad.ml 1 points 9 hours ago* (last edited 9 hours ago)

for firefox, you can temporarily bypass this using the security.pki.crlite_mode setting. see here for information. keep in mind that this will also disable legitimate revocations so can open you up to different attacks.

[-] cypherpunks@lemmy.ml 1 points 10 hours ago

Weird. I saw this post and went to https://www.presstv.ir/ and it loaded fine; i read some things and made this post. Then i clicked another link and then i got the revocation error. Maybe my browser hadn't checked the revocation list yet when it was working? 🤔

[-] cypherpunks@lemmy.ml 2 points 1 hour ago

update: it is now working for me in tor browser again (it had stopped when i posted my previous comment; i've since relaunched it), but is revoked in another browser.

and yes they are seeing the same certificate (serial number 02:29:5E:6B:B2:57:17:C4:65:23:21:F4:ED:9D:2B:29, same as OP, with sha256 fingerprint D6:63:CA:4B:6A:48:54:D2:24:2B:E8:63:D7:37:CC:68:1B:B9:61:1A:86:81:55:F2:86:87:A9:DA:67:8A:4C:9A)

in that thread i posted (post-revocation) linking to a story on www.presstv.ir there are lots of comments and nobody there has mentioned it being revoked.

conclusions: (1) their CA definitely revoked their cert, (2) the revocation is not being evenly distributed.

[-] ClathrateG@hexbear.net 11 points 1 day ago

:skepical-firefox:

[-] blobjim@hexbear.net 6 points 1 day ago

all their new error page pictures are quite good.

[-] dead@hexbear.net 12 points 1 day ago* (last edited 1 day ago)

alternative url is presstv.co.uk or nitter.net/presstv

https://en.wikipedia.org/wiki/List_of_Iranian_news_agencies

[-] darkcalling@hexbear.net 6 points 1 day ago

the .co.uk is non-HTTPS which isn't great but should keep working as there's no cert to seize. Though as it's a UK domain the UK government could revoke or seize it so it seems a kind of silly back-up to have. Why not get one in Africa or a .su or something.

[-] dead@hexbear.net 4 points 1 day ago* (last edited 1 day ago)

https it works if you put www. in the url

https://www.presstv.co.uk/

The US seized some of PressTV's domains in June 2021.

https://www.presstv.co.uk/Detail/2021/06/23/660736/Press-TV-Website-US-Government-

[-] peeonyou@hexbear.net 2 points 1 day ago

its because of the redirect

[-] RedWizard@hexbear.net 1 points 1 day ago

It loads fine for me. FF on Android.

[-] blobjim@hexbear.net 1 points 1 day ago

yeah it loads on iOS as well. I'm not sure if it's just a difference in how the certificate revocation list is retrieved.

[-] RedWizard@hexbear.net 1 points 1 day ago

If you remove the www from the URL it fails for some reason.

[-] into_highest_invite@lemmygrad.ml 2 points 9 hours ago

it seems that the plain domain certificate expired in 2024 and it just redirects to www anyway.

this post was submitted on 07 Jul 2026

49 points (100.0% liked)

technology

24409 readers

326 users here now

On the road to fully automated luxury gay space communism.

Spreading Linux propaganda since 2020

Rules:

1. Obviously abide by the sitewide code of conduct. Bigotry will be met with an immediate ban
2. This community is about technology. Offtopic is permitted as long as it is kept in the comment sections
3. Although this is not /c/libre, FOSS related posting is tolerated, and even welcome in the case of effort posts
4. We believe technology should be liberating. As such, avoid promoting proprietary and/or bourgeois technology
5. Explanatory posts to correct the potential mistakes a comrade made in a post of their own are allowed, as long as they remain respectful
6. No crypto (Bitcoin, NFT, etc.) speculation, unless it is purely informative and not too cringe
7. Absolutely no tech bro shit. If you have a good opinion of Silicon Valley billionaires please manifest yourself so we can ban you.

founded 6 years ago

MODERATORS

context@hexbear.net

SexUnderSocialism@hexbear.net

gaycomputeruser@hexbear.net

Wakmrow@hexbear.net

SwitchyandWitchy@hexbear.net

JustSo@hexbear.net