Bad SSL certificate

[pmocek]

For example:

$ curl -v https://www.consumerfinance.gov/eregulations/privacy
* About to connect() to www.consumerfinance.gov port 443 (#0)
*   Trying 216.206.30.41... connected
* successfully set certificate verify locations:
*   CAfile: none
  CApath: /etc/ssl/certs
* SSLv3, TLS handshake, Client hello (1):
* SSLv3, TLS handshake, Server hello (2):
* SSLv3, TLS handshake, CERT (11):
* SSLv3, TLS handshake, Server finished (14):
* SSLv3, TLS handshake, Client key exchange (16):
* SSLv3, TLS change cipher, Client hello (1):
* SSLv3, TLS handshake, Finished (20):
* SSLv3, TLS change cipher, Client hello (1):
* SSLv3, TLS handshake, Finished (20):
* SSL connection using AES256-SHA
* Server certificate:
*    subject: C=US; ST=MA; L=Cambridge; O=Akamai Technologies, Inc.; CN=a248.e.akamai.net
*    start date: 2014-04-18 21:24:39 GMT
*    expire date: 2015-04-18 21:24:39 GMT
*    subjectAltName does not match www.consumerfinance.gov
* Closing connection #0
* SSLv3, TLS alert, Client hello (1):
* SSL peer certificate or SSH remote key was not OK
curl: (51) SSL peer certificate or SSH remote key was not OK

[ascott1]

2.5 years later I can close this one as well