Bug#1088897: www.debian.org: https://debian.net responds with debian.org's certificate

Package: www.debian.org
Severity: important

Dear Maintainer,

Firefox told me this, but here's a dump from curl:

$ curl -v https://debian.net
*   Trying 128.31.0.62:443...
* Connected to debian.net (128.31.0.62) port 443 (#0)
* ALPN: offers h2,http/1.1
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
*  CAfile: /etc/ssl/certs/ca-certificates.crt
*  CApath: /etc/ssl/certs
* TLSv1.3 (IN), TLS handshake, Server hello (2):
* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):
* TLSv1.3 (IN), TLS handshake, Certificate (11):
* TLSv1.3 (IN), TLS handshake, CERT verify (15):
* TLSv1.3 (IN), TLS handshake, Finished (20):
* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):
* TLSv1.3 (OUT), TLS handshake, Finished (20):
* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384
* ALPN: server accepted h2
* Server certificate:
*  subject: CN=debian.org
*  start date: Oct  7 00:55:38 2024 GMT
*  expire date: Jan  5 00:55:37 2025 GMT
*  subjectAltName does not match debian.net
* SSL: no alternative certificate subject name matches target host name 'debian.net'
* Closing connection 0
* TLSv1.3 (OUT), TLS alert, close notify (256):
curl: (60) SSL: no alternative certificate subject name matches target host name 'debian.net'
More details here: https://curl.se/docs/sslcerts.html

curl failed to verify the legitimacy of the server and therefore could not
establish a secure connection to it. To learn more about this situation and
how to fix it, please visit the web page mentioned above.

-----BEGIN PGP SIGNATURE-----
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=vxzT
-----END PGP SIGNATURE-----