CyberSIXT Search
Original
Image: SecurityOnline

SecurityOnlineDdos

Riot Games Login Outage Traced to Expired SSL Certificate

Riot Games suffered a widespread service disruption after failing to renew an expired digital certificate in time, with the certificate expiring on 4 January 2026 and all HTTPS connections subsequently rejected. The immediate effect was that the League of Legends client could no longer connect to the servers.

The outage was not the first such incident, as Riot previously faced a certificate renewal lapse in January 2016, and the replacement then issued was set to expire in January 2026, despite earlier assurances that automatic renewal would prevent recurrence.

The client certificate used by Riot is self-signed, a setup that could allow a certificate valid for many years but raises private key risk, and under CA/Browser Forum rules, certificates issued from 2028 will have a maximum validity of 47 days excluding root and intermediate certificates.

An emergency fix was coordinated by a Riot Games employee after user complaints on Reddit, and server connectivity was restored after several hours of downtime, though some players may still see “unknown player” messages until updates and correct system time are applied.

Sources

On this device

Following

Intel

VendorsThreat actorsResearch reports

Settings

CyberSIXT summarises security news every 30 minutes.

↑↓ move↵ open⌘C copy CVE IDEsc close

Keyboard shortcuts

Everything works with a mouse or touch. Shortcuts are a faster path.

Search ⌘K
Search /
Next item J
Previous item K
Go to Today GT
Go to News GN
Go to CVEs GC
Go to Briefing GB
Reduce motion on this device