Security Alert - security certificate for this site is not available?

We have users that get this when they log in a PC and try to run their first credit card payment of the day. No matter which option you choose, it takes about 60 seconds to run the first transaction, after that it's OK. It's just a nuisance but a fix would be great.

revocation information
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Rich WeisslerProfessional Troublemaker^h^h^h^h^hshooterCommented:
Go ahead and view the certificate.  In the properties for the certificate should be a line for 'CRL' (Certificate Revocation List), which should have at least one (possibly more) methods of contacting the issuing CA to check to confirm that the certificate hasn't been revoked.  http or ldap URLs are frequently seen in that entry.  Determine why the workstation can't read from the CRL location, and fix that, and the Alert messages should go away.
ParisAMAuthor Commented:
If this helps - This happens when making a payment on our system that was created by our own programmers, could this be something they need to fix?

When I view the certificate details, here's what I see:

Rich WeisslerProfessional Troublemaker^h^h^h^h^hshooterCommented:
Yep.  That helps.  I went ahead and pointed myself at that website, and pulled up the certificate locally.  The CRL Distribution point in the certificate says it's:

I confirmed that I can get there.  Are there any network ACLs which prevent that user from being able to access the verisign server on port 80?  (You can see if you can hit that URL from that workstation...)

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Active Protection takes the fight to cryptojacking

While there were several headline-grabbing ransomware attacks during in 2017, another big threat started appearing at the same time that didn’t get the same coverage – illicit cryptomining.

Rich WeisslerProfessional Troublemaker^h^h^h^h^hshooterCommented:
(If you wanted to find where I'm looking... on the 'details' tab, scroll down to the 'CRL Distribution Points' field.)
ParisAMAuthor Commented:
We can access that link with no problem....
Rich WeisslerProfessional Troublemaker^h^h^h^h^hshooterCommented:
*blink*  But... that's what the error means.  
Okay... what about if you try to access that machine first thing.. before any transactions are run from the computer?  Does it still work okay?  (Any chance it's actually a DNS problem, and the sixty seconds is the time it takes the system to try a second DNS server?)

Is it at all possible that the date on the computer being used for CC processing is wrong by something in terms of days or weeks, such that the CRL looks out of date?
ParisAMAuthor Commented:
Well, you pointed us in the right direction. I showed our programmer and she said that only certain machines (cash register machines) were OK, while other call takers processing payments were getting it. Something do with with accessing an AS400 server.

Thanks for the quick responses and help.
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Microsoft Legacy OS

From novice to tech pro — start learning today.