Websites prove their identity via certificates. Firefox does not trust this site because it uses a certificate that is not valid for cdimage.debian.org. The certificate is only valid for the following names: acc.dl.osdn.jp, archive.sunet.se, chuangtzu.ac2.se, chuangtzu.ftp.acc.umu.se, chuangtzu.mirror.accum.se, ftp.ac2.se, ftp.academiccomputerclub.se, ftp.acc.umu.se, ftp.accum.se, ftp.sunet.se, gemmei.ac2.se, gemmei.ftp.acc.umu.se, gemmei.mirror.accum.se, laotzu.ac2.se, laotzu.ftp.acc.umu.se, laotzu.mirror.accum.se, meetings-archive.debian.net, mirror.ac2.se, mirror.academiccomputerclub.se, mirror.acc.umu.se, mirror.accum.se, napoleon.acc.umu.se, napoleon.ftp.acc.umu.se, napoleon.mirror.accum.se, raspi.debian.net, saimei.ac2.se, saimei.ftp.acc.umu.se, saimei.mirror.accum.se, tutankhamon.acc.umu.se, tutankhamon.ftp.acc.umu.se, tutankhamon.mirror.accum.se
There is at least a couple debian.net's in that mix, so i am hopeful this is not an attack!
best, ben -- https://agaric.coop +1 508 737 0582
OpenPGP_signature.asc
Description: OpenPGP digital signature