Hurricane Electric (HE.NET) tunnelbroker was serving a REVOKED cert yesterday
bsky.app
bsky.app
Earlier this year, their tunnelbroker service went offline due to an expired domain: https://news.ycombinator.com/item?id=47335072
HE doesn't appear to be doing a very good job maintaining this infrastructure.