INSTAGRAM USES EXPIRING CERTIFICATES AS SINGLE DAY TLS CERTIFICATES

Summary from the TLDR InfoSec newsletter

While testing a personal tool, the author of this post noticed that certificates for instagram.com had unusual expiration times. The author set up a machine that attempted to pull the certificates for instagram.com and www.instagram.com every 5 minutes. They discovered that Instagram uses certificates with a lifetime of 8 days, replaces them daily, and uses unique certificates for instagram.com and www.instagram.com.