Oanda website has bad SSL Cert

Just went to log into Oanda and my browser is complaining the site is not using the correct SSL CERT. Has anyone else see this? See below:

fxtrade.oanda.com uses an invalid security certificate. The certificate is only valid for the following names: *.llnw.com , *.llnw.net , *.lvp.llnw.net , *.phx2.llnw.net , *.phx3.llnw.net , *.upload.llnw.net , *.video.llnw.net , *.cs.lldns.net , *.loris.llnwd.net , *.s.loris.llnwd.net , *.llnwi.net , *.s.llnwi.net , *.limelight.com , *.video.limelight.com , *.videoplatform.limelight.com , *.llnw-trials.com , *.assets.delvenetworks.com , *.delvenetworks.com , *.s.delvenetworks.com , *.cpl.delvenetworks.com , *.s.cpl.delvenetworks.com , *.clickability.com , *.i.clickability.com , *.la.clickability.com , *.va.clickability.com , *.vo.llnwd.net , *.s.mfs.lvp.llnw.net , *.hs.llnwd.net (Error code: ssl_error_bad_cert_domain)

Danger Will Robinson. Danger. Check out this chat, by the way, the SSL for the Chat window does not say OANDA is the owner. Beware do not log in.

Please wait for an agent to respond. Are you aware of our Webinars? - please visit fxtrade.oanda.com/learn/webinars/ 我们新推出了中文版的实时外汇交易免费在线讲座！-请浏览http://www.oanda.sg/lang/cns/learn/webinars/
You are now chatting with 'Tricia'
Tricia: Thank you for choosing OANDA. How may I help you?
Michael: Hey, is this really Oanda? When I go to log in the SSL Cert says it is not valid.
Michael: This is what my browser tell me:
Michael: fxtrade.oanda.com uses an invalid security certificate. The certificate is only valid for the following names: *.llnw.com , *.llnw.net , *.lvp.llnw.net , *.phx2.llnw.net , *.phx3.llnw.net , *.upload.llnw.net , *.video.llnw.net , *.cs.lldns.net , *.loris.llnwd.net , *.s.loris.llnwd.net , *.llnwi.net , *.s.llnwi.net , *.limelight.com , *.video.limelight.com , *.videoplatform.limelight.com , *.llnw-trials.com , *.assets.delvenetworks.com , *.delvenetworks.com , *.s.delvenetworks.com , *.cpl.delvenetworks.com , *.s.cpl.delvenetworks.com , *.clickability.com , *.i.clickability.com , *.la.clickability.com , *.va.clickability.com , *.vo.llnwd.net , *.s.mfs.lvp.llnw.net , *.hs.llnwd.net (Error code: ssl_error_bad_cert_domain)
Tricia: Did you go to fxtrade.oanda.com?
Michael: Yes, the cut in paste says fxtrade.oanda.com
Tricia: I believe you are receiving this message because we have recently restarted the server as there may be a potential risk with SSL
Michael: Ok. So is this going to be fixed soon? I would like to do some trading.
Tricia: Everything is fine. There is no problem.
Tricia: You can continue with this.
Michael: So are you telling me to log into a server that controls my financial data when the SSL cert tell me that it can not verify it is Oanda?
Tricia: I am not sure why your browser is showing you this message because we have recently looked into this issue.
Tricia: If you are concerned about this, can you please take a screenshot and send this to our email address at [email protected]?
Tricia: We will send this over to our technical support team for investigation.
Michael: Ok. I just checked out your cert. And I'm thining that you are not Oanda, and I'll post this chat and send something to the FBI.
Tricia: I am from OANDA.
Tricia: I believe you just started this live chat from our webpage.
Michael: Yeah. The one that is being spoofed by you. Nice try. I'll warn others.
Michael: I hope the FBI catches you and thows you into jail for a long time.

if you would of call OANDA they would of told you that tricia works for them in chat, don't know what happen but OANDA did say they fix the problem

Actually, I just went to the site, and it is working ok.

I'm thinking there was a man in the middle attack going on that was trying to get users to divulge their credentials.

However, with this said, the current SSL cert they use is a cheep one where it does not say that it is owned by Oanda Corp. There cert says concerning the owner: "This website does not supply ownership information."

For them not clearly identifying who they are in the certificate is a very bad practice. Basically when you log in to Oanda and supply your credentials you have really no idea who you are dealing with. Not good.

there is a possibility that fxTrade passwords may have been exposed for customers logging into fxTrade via the website yesterday and earlier today
https://fxtrade.oanda.com/community/...opic/54007645/
FBI? Just kidding?

Hi Everyone,

As Naokia980 linked to above, we sent out a communication to clients yesterday regarding an SSL security issue affecting a large number of sites across the globe. As mentioned in in the link, a fix was deployed yesterday and all clients have been informed on what next steps to take. Our audits show no evidence to suggest that any OANDA client passwords were compromised. Client security is of utmost importance to OANDA and this communication was a proactive measure on our part to protect our clients.

Please feel free to get in touch if you have any questions.

Thanks,
The OANDA Team