Solved

Wrong / Invalid SSL shown on some computers

Posted on 2013-12-13
2
478 Views
Last Modified: 2013-12-13
Our website uses a certificate by GoDaddy and on most computers everything works fine - we can see no errors with the certificate and the information contained within is correct.

Some of our customers keep ringing us to say our certificate is invalid though. Upon inspection it appears the certificate is issued by our servers rDNS address and issued to the same. We have been unable to reproduce this issue.

What could be going on here and how can we resolve it?

See attached screenshots for an idea what I mean...
ValidCert.PNG
InvalidCert.PNG
0
Comment
Question by:Rabbit80
2 Comments
 
LVL 20

Accepted Solution

by:
TheAvenger earned 500 total points
ID: 39716086
Notice that the ones working have a newer Windows version than the ones not working (not working seems to be Windows XP). This means that probably Windows XP does not have the root certificate of GoDaddy. You can follow the steps here to check on both machines if the GoDaddy root certificate is installed or not. If it is not installed in Windows XP, you have to contact GoDaddy for support and probably a new certificate with an older (and supported by XP) certification authority. The other option is to make all your customers installed it manually but that will be a difficult task.

Note that Windows XP updates the root certificates with Windows Update. However depending on the environment these may not be installed, so some Windows XP users will have no problem while others will still have.
0
 
LVL 1

Author Closing Comment

by:Rabbit80
ID: 39716288
Thanks for that. It is virtually impossible for me to run through the checks to see if the correct root certificates are installed on our customers machines as this is a public facing website and we have thousands of people visiting daily. However - I have found a Microsoft patch that updates the root certificates and I am asking one of our users to try installing that to see if it helps. (KB931125).

Of course, as of April next year this problem is likely to get significantly worse as new updates to Windows XP machines will not be released meaning that root certificates will no longer be updated at all. Around 25% of our visitors still use XP.
0

Featured Post

Highfive Gives IT Their Time Back

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

Join & Write a Comment

Several part series to implement Internet Explorer 11 Enterprise Mode
This article offers some helpful and general tips for safe browsing and online shopping. It offers simple and manageable procedures that help to ensure the safety of one's personal information and the security of any devices.
This Micro Tutorial will demonstrate how nuggets on the Web are formatted by using Chrome Developer Tools. These tools would not only view the site's CSS but it can also modify it and save the CSS to use on your own site.
How to create a custom search shortcut to site-search Experts Exchange using Google in the Firefox browser. This eliminates the need to type out site:experts-exchange.com whenever you want to search the site. Launch your Bookmark Menu: Press 'Ctrl +…

747 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now