<div>
Thanks for that. It is virtually impossible for me to run through the checks to see if the correct root certificates are installed on our customers machines as this is a public facing website and we have thousands of people visiting daily. However - I have found a Microsoft patch that updates the root certificates and I am asking one of our users to try installing that to see if it helps. (KB931125).<br />
<br />
Of course, as of April next year this problem is likely to get significantly worse as new updates to Windows XP machines will not be released meaning that root certificates will no longer be updated at all. Around 25% of our visitors still use XP.
</div>


Thanks for that. It is virtually impossible for me to run through the checks to see if the correct root certificates are installed on our customers machines as this is a public facing website and we have thousands of people visiting daily. However - I have found a Microsoft patch that updates the root certificates and I am asking one of our users to try installing that to see if it helps. (KB931125).

Of course, as of April next year this problem is likely to get significantly worse as new updates to Windows XP machines will not be released meaning that root certificates will no longer be updated at all. Around 25% of our visitors still use XP.

<div>
<div class="content wysiwyg-content">
Our website uses a certificate by GoDaddy and on most computers everything works fine - we can see no errors with the certificate and the information contained within is correct.<br />
<br />
Some of our customers keep ringing us to say our certificate is invalid though. Upon inspection it appears the certificate is issued by our servers rDNS address and issued to the same. We have been unable to reproduce this issue.<br />
<br />
What could be going on here and how can we resolve it?<br />
<br />
See attached screenshots for an idea what I mean...<br />
<a href="https://filedb.experts-exchange.com/incoming/2013/12_w50/692623/ValidCert.PNG" target="_blank" class="file-inline" title="This is what some of our customers are seeing (43 KB)"><svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 512 512"><path d="M67.508 468.467c-58.005-58.013-58.016-151.92 0-209.943l225.011-225.04c44.643-44.645 117.279-44.645 161.92 0 44.743 44.749 44.753 117.186 0 161.944l-189.465 189.49c-31.41 31.413-82.518 31.412-113.926.001-31.479-31.482-31.49-82.453 0-113.944L311.51 110.491c4.687-4.687 12.286-4.687 16.972 0l16.967 16.971c4.685 4.686 4.685 12.283 0 16.969L184.983 304.917c-12.724 12.724-12.73 33.328 0 46.058 12.696 12.697 33.356 12.699 46.054-.001l189.465-189.489c25.987-25.989 25.994-68.06.001-94.056-25.931-25.934-68.119-25.932-94.049 0l-225.01 225.039c-39.249 39.252-39.258 102.795-.001 142.057 39.285 39.29 102.885 39.287 142.162-.028A739446.174 739446.174 0 0 1 439.497 238.49c4.686-4.687 12.282-4.684 16.969.004l16.967 16.971c4.685 4.686 4.689 12.279.004 16.965a755654.128 755654.128 0 0 0-195.881 195.996c-58.034 58.092-152.004 58.093-210.048.041z"/></svg>ValidCert.PNG</a><br />
<a href="https://filedb.experts-exchange.com/incoming/2013/12_w50/692624/InvalidCert.PNG" target="_blank" class="file-inline" title="This is what we are seeing (49 KB)"><svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 512 512"><path d="M67.508 468.467c-58.005-58.013-58.016-151.92 0-209.943l225.011-225.04c44.643-44.645 117.279-44.645 161.92 0 44.743 44.749 44.753 117.186 0 161.944l-189.465 189.49c-31.41 31.413-82.518 31.412-113.926.001-31.479-31.482-31.49-82.453 0-113.944L311.51 110.491c4.687-4.687 12.286-4.687 16.972 0l16.967 16.971c4.685 4.686 4.685 12.283 0 16.969L184.983 304.917c-12.724 12.724-12.73 33.328 0 46.058 12.696 12.697 33.356 12.699 46.054-.001l189.465-189.489c25.987-25.989 25.994-68.06.001-94.056-25.931-25.934-68.119-25.932-94.049 0l-225.01 225.039c-39.249 39.252-39.258 102.795-.001 142.057 39.285 39.29 102.885 39.287 142.162-.028A739446.174 739446.174 0 0 1 439.497 238.49c4.686-4.687 12.282-4.684 16.969.004l16.967 16.971c4.685 4.686 4.689 12.279.004 16.965a755654.128 755654.128 0 0 0-195.881 195.996c-58.034 58.092-152.004 58.093-210.048.041z"/></svg>InvalidCert.PNG</a>
</div>
</div>


This is what some of our customers are seeing

ValidCert.PNG

InvalidCert.PNG

Our website uses a certificate by GoDaddy and on most computers everything works fine - we can see no errors with the certificate and the information contained within is correct.

Some of our customers keep ringing us to say our certificate is invalid though. Upon inspection it appears the certificate is issued by our servers rDNS address and issued to the same. We have been unable to reproduce this issue.

What could be going on here and how can we resolve it?

See attached screenshots for an idea what I mean...

Wrong / Invalid SSL shown on some computers

HTTPS is a protocol for secure communication over a computer network which is widely used on the Internet. HTTPS consists of communication over Hypertext Transfer Protocol (HTTP) within a connection encrypted by Transport Layer Security (TLS) or its predecessor, Secure Sockets Layer (SSL). The main motivation for HTTPS is authentication of the visited website and to protect the privacy and integrity of the exchanged data. HTTPS is widely used for protecting page authenticity on all types of websites, securing accounts and keeping user communications, identity and web browsing private.

SSL / HTTPS

Web browsers are applications used primarily to display documents, files and media from the Internet, identified by a Uniform Resource Identifier (URI) that can be a page, image, video or other file. Some browsers require the use of add-ons or extensions to safely render the information they receive; others have systems built into them to perform the same functions.

Web Browsers

The Apache HTTP Server is a secure, efficient and extensible server that provides HTTP services in sync with the current HTTP standards. Typically Apache is run on a Unix-like operating system, but it is available for a wide variety of operating systems, including Linux, Novell NetWare, Mac OS-X and Windows. Released under the Apache License, Apache is open-source software.