Solved

Wrong / Invalid SSL shown on some computers

Posted on 2013-12-13
2
484 Views
Last Modified: 2013-12-13
Our website uses a certificate by GoDaddy and on most computers everything works fine - we can see no errors with the certificate and the information contained within is correct.

Some of our customers keep ringing us to say our certificate is invalid though. Upon inspection it appears the certificate is issued by our servers rDNS address and issued to the same. We have been unable to reproduce this issue.

What could be going on here and how can we resolve it?

See attached screenshots for an idea what I mean...
ValidCert.PNG
InvalidCert.PNG
0
Comment
Question by:Rabbit80
2 Comments
 
LVL 20

Accepted Solution

by:
TheAvenger earned 500 total points
ID: 39716086
Notice that the ones working have a newer Windows version than the ones not working (not working seems to be Windows XP). This means that probably Windows XP does not have the root certificate of GoDaddy. You can follow the steps here to check on both machines if the GoDaddy root certificate is installed or not. If it is not installed in Windows XP, you have to contact GoDaddy for support and probably a new certificate with an older (and supported by XP) certification authority. The other option is to make all your customers installed it manually but that will be a difficult task.

Note that Windows XP updates the root certificates with Windows Update. However depending on the environment these may not be installed, so some Windows XP users will have no problem while others will still have.
0
 
LVL 1

Author Closing Comment

by:Rabbit80
ID: 39716288
Thanks for that. It is virtually impossible for me to run through the checks to see if the correct root certificates are installed on our customers machines as this is a public facing website and we have thousands of people visiting daily. However - I have found a Microsoft patch that updates the root certificates and I am asking one of our users to try installing that to see if it helps. (KB931125).

Of course, as of April next year this problem is likely to get significantly worse as new updates to Windows XP machines will not be released meaning that root certificates will no longer be updated at all. Around 25% of our visitors still use XP.
0

Featured Post

Free Tool: Path Explorer

An intuitive utility to help find the CSS path to UI elements on a webpage. These paths are used frequently in a variety of front-end development and QA automation tasks.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Do you come here a lot? Are you lazy like me and don't want to go through the "trouble" of having to click your Dock's Safari icon and then having to click your Experts Exchange Favorites bookmark to get here? Well then this article is for you.
Microservice architecture adoption brings many advantages, but can add intricacy. Selecting the right orchestration tool is most important for business specific needs.
Google currently has a new report that is in beta and coming soon to Webmaster Tool accounts. This Micro Tutorial will highlight new features for Google Webmaster Tools.
This Micro Tutorial will demonstrate how to add subdomains to your content reports. This can be very importing in having a site with multiple subdomains.

837 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question