In Chrome, right click -> Inspect -> Security -> View Certificate

frik · on July 12, 2017

Thx.

But why hide it so that normal web user can't access it?

Checking what Cert-company signed the certificate is important to trust a site.

Before it was one left click and it showed the company that signed the cert (optional you could view the cert itself)

Now many steps like click on hamburger button -> More tools -> Developer Tools -> Security tab (bottom of screen) -> View Certificate (shows certificate itself)

What a trainwreck of decision t remove this vital info. e.g. YCombinator cert is from "Comodo". If it's suddenly from a funky else it would help lessen the trust.

I am sure, it was just a mistake to remove it and some cargo cult.

qb45 · on July 12, 2017

Must be a Chrome thing. In Firefox 54 it's three clicks: lock icon, ">", "more info". Actually the second click already gives some summary including issuer.

collinmanderson · on July 13, 2017

The browsers probably want to start relying on HTTP Public Key Pinning rather than relying on the user to verify the public key.