Solved

Wrong / Invalid SSL shown on some computers

Posted on 2013-12-13
2
481 Views
Last Modified: 2013-12-13
Our website uses a certificate by GoDaddy and on most computers everything works fine - we can see no errors with the certificate and the information contained within is correct.

Some of our customers keep ringing us to say our certificate is invalid though. Upon inspection it appears the certificate is issued by our servers rDNS address and issued to the same. We have been unable to reproduce this issue.

What could be going on here and how can we resolve it?

See attached screenshots for an idea what I mean...
ValidCert.PNG
InvalidCert.PNG
0
Comment
Question by:Rabbit80
2 Comments
 
LVL 20

Accepted Solution

by:
TheAvenger earned 500 total points
ID: 39716086
Notice that the ones working have a newer Windows version than the ones not working (not working seems to be Windows XP). This means that probably Windows XP does not have the root certificate of GoDaddy. You can follow the steps here to check on both machines if the GoDaddy root certificate is installed or not. If it is not installed in Windows XP, you have to contact GoDaddy for support and probably a new certificate with an older (and supported by XP) certification authority. The other option is to make all your customers installed it manually but that will be a difficult task.

Note that Windows XP updates the root certificates with Windows Update. However depending on the environment these may not be installed, so some Windows XP users will have no problem while others will still have.
0
 
LVL 1

Author Closing Comment

by:Rabbit80
ID: 39716288
Thanks for that. It is virtually impossible for me to run through the checks to see if the correct root certificates are installed on our customers machines as this is a public facing website and we have thousands of people visiting daily. However - I have found a Microsoft patch that updates the root certificates and I am asking one of our users to try installing that to see if it helps. (KB931125).

Of course, as of April next year this problem is likely to get significantly worse as new updates to Windows XP machines will not be released meaning that root certificates will no longer be updated at all. Around 25% of our visitors still use XP.
0

Featured Post

Migrating Your Company's PCs

To keep pace with competitors, businesses must keep employees productive, and that means providing them with the latest technology. This document provides the tips and tricks you need to help you migrate an outdated PC fleet to new desktops, laptops, and tablets.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

#Citrix #Internet Explorer #Enterprise Mode #IE 11 #IE 8
Introduction This article is intended for those who are new to PHP error handling (https://www.experts-exchange.com/articles/11769/And-by-the-way-I-am-New-to-PHP.html).  It addresses one of the most common problems that plague beginning PHP develop…
Google currently has a new report that is in beta and coming soon to Webmaster Tool accounts. This Micro Tutorial will highlight new features for Google Webmaster Tools.
This Micro Tutorial will demonstrate how to add subdomains to your content reports. This can be very importing in having a site with multiple subdomains.

770 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question