Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

how fix "this certificate cannot be verified up to a trusted certification authority"

I have problem in IE9 with securiry certificate.

Then I go to specific address I got

There is a problem with this website's security certificate.

How can I avoid appearence of this window?

I try enter on Continue to this website (not recommended). - cectificate error - View Certificates. I see that This certificate is OK. in certificate Status on certification Path tab. But on the tab General I see text: This certificate cannot be verified up to a trusted certification authority 1) Install certificate 2) Export to my folder from mmc 3)go to Tool - Internet option - Content - Certificates - Import, and import this sertificate to Trusted Root Certification Authorities, restart IE, but this certificate doesn't appears in this list. I try to import it to Trusted Publishers - certificate appears in that list. 4) I check mmc, here this certificate is in section Trusted Root Certification Authorities.

After all those tries I still There is a problem with this website's security certificate. appears after I enter site url. Could someone help me to fix this?

like image 499
khris Avatar asked Nov 07 '13 17:11

khris


People also ask

How do I enable trusted certificates?

Expand Policies > Windows Settings > Security Settings > Public Key Policies. Right-click Trusted Root Certification Authorities and select Import. Click Next and Browse to select the CA certificate you copied to the device. Click Finish and then OK.

What does it mean when it says certificate not trusted?

The most common cause of a "certificate not trusted" error is that the certificate installation was not properly completed on the server (or servers) hosting the site. Use our SSL Certificate tester to check for this issue. In the tester, an incomplete installation shows one certificate file and a broken red chain.

How do I verify a certification?

Chrome has made it simple for any site visitor to get certificate information with just a few clicks: Click the padlock icon in the address bar for the website. Click on Certificate (Valid) in the pop-up. Check the Valid from dates to validate the SSL certificate is current.


1 Answers

Not all certificates can be installed as intermediate or root (they're limited by their "Basic Constraints" which you can see in View Certificate window on the Details tab).

Sounds to me like the certificate itself is good, but isn't trusted for one of the following reasons:

  1. It was signed by a certificate authority that is not trusted, or the chain of trust is broken by some certificate that isn't trusted
  2. The root authority certificate or one of the intermediate certificates is not installed in the browser's certificate store
  3. One of the certificates in the chain of trust has expired
  4. One of the certificates in the chain of trust is on a black list (CRL)

Take a look at the Certification Path tab and ensure all of the certificates are OK. If they're bad they should have a red X. Also, you can click on each node in the certification path to view the certificate at each level; visually inspect each one and ensure they are OK.

like image 98
John Wu Avatar answered Oct 22 '22 13:10

John Wu