repository.spotify.com dns ssl cert is for cloudfront.net... fail!

[hgcoin1]

All use of the linux client for debian/ubuntu using the posted instructions fail as recent updates on the server failed to include the correct ssl certificate for repository.spotify.com.   Instead, the provided certificate is from Amazon, cloudfront.net.  As a result, the client doesn't update as Debian / Ubuntu won't trust sites that provide mismatched security.   Or -- there is an active spoof in place and some bad guy has taken over an amazon account and is sending malware on the back of a spotify client.  Either way--- not good and should be fixed!

Check it yourself:   Go visit such as https://www.digicert.com/help/  put in repository.spotify.com and see...

Common Name = *.cloudfront.net

Subject Alternative Names = cloudfront.net, *.cloudfront.net

[hgcoin1]

apt update
...
Reading state information... Done
2 packages can be upgraded. Run 'apt list --upgradable' to see them.
W: Failed to fetch https://repository.spotify.com/dists/stable/InRelease Certificate verification failed: The certificate is NOT trusted. The name in the certificate does not match the expected. Could not handshake: Error in the certificate verification. [IP: 99.84.170.193 443]
W: Some index files failed to download. They have been ignored, or old ones used instead.
root@ceo1homenx:~# cat /etc/apt/sources.list.d/spotify.list
deb https://repository.spotify.com stable non-free