www.spi-inc.org uses an invalid security certificate

[Bill Allombert]

On Thu, Feb 27, 2014 at 07:43:32AM +0000, TJ wrote:
> Early I accessed a secure Debian server [1] that presented a X509 certificate issued by an untrusted CA that turned out to be spi-inc.
> 
> Visiting spi-inc.org [2] I hit another issue with an invalid certificate
> being presented causing Firefox to warn "The certificate is not valid for any
> server names" (as well as certificate not trusted). The certificate's Common
> Name is "members.spi-inc.org" and there are no Subject Alt Name  hosts.

For reference:
Using Debian which includes the SPI CA, I get 

spi-inc.org uses an invalid security certificate. The certificate is not valid
for any server names. (Error code: ssl_error_bad_cert_domain)

even though there is no issue with
https://alioth.debian.org/scm/?group_id=30428

Cheers,
Bill.