SSL Certificate Error on Blocklet Payment Kit "Launch Now" Button
🐛 Summary
When clicking the "Launch Now" button on the Blocklet Payment Kit page (https://www.blocklet.io/en/payment-kit), users are redirected to https://store.blocklet.dev but encounter a SSL certificate error:
plaintext
Your connection is not private
Attackers might be trying to steal your information from store.blocklet.dev
net::ERR_CERT_AUTHORITY_INVALID
This prevents secure access to the payment kit interface and raises security concerns.
🔁 Steps to Reproduce
- Navigate to:
https://www.blocklet.io/en/payment-kit - Click the "Launch Now" button.
- Observe the SSL certificate error when redirected to
https://store.blocklet.dev. - Note the error message: text
javascript Your connection is not private Attackers might be trying to steal your information from store.blocklet.dev net::ERR_CERT_AUTHORITY_INVALID
📉 Severity
Critical – Blocks access to the Payment Kit and exposes users to potential security risks.
📝 Additional Notes
- The error occurs consistently across browsers (Chrome, Firefox, Edge).
- The certificate appears to be self-signed or issued by an untrusted Certificate Authority (CA).
- Reproducible in [specify browser/network if known].
🛠️ Expected Behavior
- Clicking "Launch Now" should securely redirect to
https://store.blocklet.devwith a valid SSL certificate. - Users should not see security warnings or certificate errors.
🧪 Actual Behavior
- The browser blocks access to
store.blocklet.devdue to an invalid SSL certificate. - Users cannot proceed to the Payment Kit interface.
1 reply
This site is being rebuilt.