Add invalid-signature.badssl.com
Addresses #26. Just look at that issue, it's the one that you granted me collaborator status on! :smile:
For the real site, I recommend a CSR just for invalid-signature.badssl.com. If you try to do it to the existing wildcard cert, browsers will complain about duplicate serial numbers instead.
@lgarron: ping on review :)
@lgarron: Ping again! It would be quite nice if you could r this. :)
@marumari This looks good and sensible to me! :)
- This needs some manual rebasing now.
Is there a way we can do this for prod without issuing additional certs? Create a cert that is purportedly signed by an actual intermediate, but make sure to have a unique serial number and fiddle with the signature?