NB / OT: I'm getting NET::ERR_CERT_AUTHORITY_INVALID for wikipedia.org currently.
Update: Working with Wikipedia on this. They pushed a new set of certs earlier today. There may be issues with some UAs. My old, stale Android (5.0.2) and Chrome (76.0.3809.132) aren't happy with Wikipedia or Globalsign's root test URL:
This has been resolved, working through Wikipedia:
We've deployed a cross-chained intermediate back to the older R3 root now, which we believe will fix this for you (and other such clients). It has a small perf impact on all of the modern clients, but I think Android 5 isn't quite old enough yet that we can just ignore its compatibility.
Update: Working with Wikipedia on this. They pushed a new set of certs earlier today. There may be issues with some UAs. My old, stale Android (5.0.2) and Chrome (76.0.3809.132) aren't happy with Wikipedia or Globalsign's root test URL:
https://valid.r5.roots.globalsign.com/
(Also an ERR_CERT_AUTHORITY_INVALID)
I suspect a stale CA list somewhere.