I’m trying to download anything from the software download page, but the cert I’m getting doesn’t have download.mikrotik.com in its alternate names, so it’s crapping out. Anyone else seeing this? I was able to download stuff earlier.
The certificate appears to be ok, according to SSL Server Test: download.mikrotik.com (Powered by Qualys SSL Labs)
It has *.mikrotik.com:
PiHole issue.
Like
https://download.mikrotik.com/routeros/7.20.4/install-image-7.20.4.zip
Should work, but the cert is invalid. Weird.
The link downloads fine for me. What IP address is download.mikrotik.com resolved to at your place? according to:
https://dnschecker.org/#A/download.mikrotik.com
https://dnschecker.org/#AAAA/download.mikrotik.com
It should be the same for all DNS resolvers around the globe, 159.148.147.251 for IPv4 and 2a02:610:7501:3000::251 for IPv6.
What does nslookup dowload.mikrotik.com or dig dowload.mikrotik.com show at your place?
According to your screenshot, your DNS resolver appears to produce the mikrotik.com's IP address for download.mikrotik.com.

