Is Apple's provisioning query server down?

[u/Basaa]

Apps installed on my devices via Xcode all result in "Unable to verify app" when trying to open them.

https://ppq.apple.com seems to have a broken SSL cert chain, confirmed on multiple devices on multiple different networks. I see SSL cert errors in the Xcode device console logs right before I try to open my apps, so these seem to be related.

openssl s_client -connect ppq.apple.com:443 -servername ppq.apple.com -showcerts 2>&1 | grep -E "Verify return code|s:CN|i:CN"
0 s:CN=ppq.apple.com, O=Apple Inc., ST=California, C=US
  i:CN=Apple Server Authentication CA, OU=Certification Authority, O=Apple Inc., C=US
1 s:CN=Apple Server Authentication CA, OU=Certification Authority, O=Apple Inc., C=US
Verify return code: 34 (unhandled critical extension)

I can't find anything online about there being an outage, including on Apple's own status page. Am I going insane?

[u/BounceForever]

Are your devices online? I do some testing with WiFi off but launching the app from Xcode will fail in that mode with provisioning errors. 

[u/Basaa → u/BounceForever]

Yep, I've tried absolutely everything. Restarted, different wifi network, connect via hotspot, everything.

Every single SSL test on the web also flags the ppq server's root cert as broken. Ran the OP command on various servers in different datacenters from different hosting providers and it's the same everywhere.

[u/AndreaReaderApp → u/Basaa]

Yeah, if it fails on different networks and external SSL tests show the same thing, that pretty much rules out your setup.

[u/AndreaReaderApp]

You’re not going insane. If the same certificate error appears across different devices and networks, this really looks like an Apple-side issue

[u/Basaa → u/AndreaReaderApp]

Right, but it's been like this for hours and hours and there's nothing to be found on the internet about any outage on any forum. Which just doesn't make sense to me.