่ทณๅˆฐไธป่ฆๅ†…ๅฎน

SSL Certificate Error on Blocklet Payment Kit "Launch Now" Button

JM โ€œcryptotestnetโ€ Morales
ๆ”ฏๆŒ
bugrejected

๐Ÿ›ย Summary

When clicking theย "Launch Now"ย button on the Blocklet Payment Kit page (https://www.blocklet.io/en/payment-kit), users are redirected toย https://store.blocklet.devย but encounter aย SSL certificate error:

plaintext

javascript
Your connection is not private  
Attackers might be trying to steal your information from store.blocklet.dev  
net::ERR_CERT_AUTHORITY_INVALID

This prevents secure access to the payment kit interface and raises security concerns.

๐Ÿ”ย Steps to Reproduce

  1. Navigate to:ย https://www.blocklet.io/en/payment-kit
  2. Click theย "Launch Now"ย button.
  3. Observe theย SSL certificate errorย when redirected toย https://store.blocklet.dev.
  4. Note the error message: text javascript Your connection is not private Attackers might be trying to steal your information from store.blocklet.dev net::ERR_CERT_AUTHORITY_INVALID

๐Ÿ“‰ย Severity

Criticalย โ€“ Blocks access to the Payment Kit and exposes users to potential security risks.

๐Ÿ“ย Additional Notes

  • The error occurs consistently across browsers (Chrome, Firefox, Edge).
  • The certificate appears to beย self-signedย or issued by anย untrusted Certificate Authority (CA).
  • Reproducible in [specify browser/network if known].

๐Ÿ› ๏ธย Expected Behavior

  • Clickingย "Launch Now"ย should securely redirect toย https://store.blocklet.devย with a valid SSL certificate.
  • Users should not see security warnings or certificate errors.

๐Ÿงชย Actual Behavior

  • The browser blocks access toย store.blocklet.devย due to anย invalid SSL certificate.
  • Users cannot proceed to the Payment Kit interface.

1 ๆกๅ›žๅค

Shuang Liu13ไธชๆœˆๅ‰

This site is being rebuilt.

ๅ›žๅค