"Website does not supply identity information" even on freshly formatted machine

[Anon136]

So yea ssl encryption is not working even with websites like google and youtube. For troubleshooting purposes I booted linux mint from a flash drive and still i get the same little warning to the left of my address bar. What are your thoughts? Man in the middle? Something simpler?

[Foxpup]

What's the fingerprint of the certificate you're getting from google.com? I get:
SHA1: 3c6bde6ca0a1ae6ae9d5bfb367ab124e1b988bfb
MD5: 2791dac0733085dbe323ef7d6faa7fcd

[Anon136]

What's the fingerprint of the certificate you're getting from google.com? I get:
SHA1: 3c6bde6ca0a1ae6ae9d5bfb367ab124e1b988bfb
MD5: 2791dac0733085dbe323ef7d6faa7fcd

Well it doesn't always give the warning. Only sometimes. I randomly searched things until it appeared and then got the fingerprints. After writing them down I compared them to a situation when it is not giving the warnings and they matched. But here they are anyway. I'm sure they are probably right.

SHA1 Fingerprint: D8:06:3D:AA:BB:9A:37:21:FE:95:DD:AC:DE:64:2F:20:17:57:FE:DF
MD5 Fingerprint: E8:1D:A1:DD:10:93:F5:24:23:F1:5A:81:39:DA:41:F8

[Anon136]

Here is a URL that gives me the warning no matter how  many times I refresh.

https://www.youtube.com/watch?v=bjoHYuet914

Here is screenshot.

[Foxpup]

Here is a URL that gives me the warning no matter how  many times I refresh.

https://www.youtube.com/watch?v=bjoHYuet914

Here is screenshot.

Yeah, I've just noticed that too. All YouTube videos (but not YouTube's main page, oddly enough) are using the (legit) certificate for google.com, instead of youtube.com. I've no idea where about that other certificate you're getting. Can you post the entire certificate?

EDIT: Actually, it seems that all of Google's sites (except GMail) are suddenly using bogus certificates. This certificate isn't bogus after all, it just uses the SubjectAltName extension, which isn't supported by some (most?) SSL implementations. Though GMail still has its own certificate, which doesn't use it, so it seems Google's aware of the potential incompatibility, but they just don't give a shit about YouTube users.