All extensions disabled due to expiration of intermediate signing cert

On a slightly different note, is there some curated collection of serious incidents like this somewhere?

Something we could refer to when discussing possible pitfalls?

I believe https://github.com/danluu/post-mortems is close to what you want.

I've seen a (then) current version of Glassfish (java EE server) refuse to start because of an expired internal certificate a couple of years ago.

So here is one example: https://stackoverflow.com/questions/18248020/certificate-has...

Risks Digest

https://catless.ncl.ac.uk/Risks/