Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

Is my SSL certificate valid?

I have a weired behaviour with this website: https://cartefidelite.mobi/. I can not determine if the certificate is valid.

On iPhone, it said it's valid, on Androïd it said it's not! On a desktop computer it's the same, it's valid for Safari but not for Google Chrome (on Mac) - On firefox Mac it's not valid either.

So my question is: Is this certificate valid and some browser just can't succesfully build the certificate tree hierarchy to a root certificate? Or is this certificate not valid?

Here is a screenshot on Google Chrome (13.0) and Safari (5.1):

enter image description here

like image 375
Ludovic Landry Avatar asked Jul 25 '11 07:07

Ludovic Landry


2 Answers

The certificate is valid but some browser just can't succesfully build the certificate tree hierarchy to the root certificate. The "globalsign domain validation CA - G2" certificate is not in the truststore of all browsers yet.

What server are you running this application on? The solution is to add the certificates from the certificate chain to your server configuration. The server will then send them to the client and everything will be fine.

On Apache HTTPD server you add the following to the configuration:

SSLCertificateChainFile <globalsign domain validation CA - G2.crt>
like image 76
boes Avatar answered Oct 13 '22 06:10

boes


For anybody looking for the GlobalSign Domain Validation CA - G2 (Expiry 13th April 2022), here it is:

Domain Validation Root Bundle 2011 from GlobalSign

like image 34
Valentin Despa Avatar answered Oct 13 '22 06:10

Valentin Despa