Link to home
Start Free TrialLog in
Avatar of itaakashcom
itaakashcom

asked on

Getting Certificate error on IE and Chrome but opens in FireFox

I am trying to open https://github.com on IE 11 and Chrome but it gives a SSL certificate error NET::ERR_CERT_AUTHORITY_INVALID on chrome with no option to proceed ahead.

It's happening with almost every site but luckily I am getting the option to proceed. Then I installed Firefox (portable version) and checked that it works without any problem!

Digging further I found that Firefox is using system proxy settings and I do not see any settings in IE and Chrome. What could go wrong . How to fix this ?

I have tried a lot changing the Advanced Security setting in Internet Explorer but no help.
Github.jpg
Avatar of Kimputer
Kimputer

Sometimes, your system time is wrong (but usually the error message will show it).

So in this case, I'd rather check the certificate itself. Can you take another screenshot? Click on the lock icon > tab Connection > Certificate Information.
Then another screenshot of the Certification Path tab.

If proxies are setup, IE and Chrome are already using it (assuming you mean, nothing is filled in Firefox, but it's using the SYSTEM's proxy settings which are found in Control Panel > Internet Settings > Connections, when filled in there, IE and Chrome are already using these settings).
Avatar of itaakashcom

ASKER

Uploaded the file as required above
Certification-Path.jpg
Try to click on the top Digicert icon with the red cross in it, and "view certificate" and screenshot again.
Adding  as per requested.
Digicert_path.jpg
ASKER CERTIFIED SOLUTION
Avatar of Kimputer
Kimputer

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Thanks . It worked like a charm :) . Also you taught me how to look for certificates being used by sites. Thanks again.
Do not take these steps lightly though. Only do these steps if you know you're on the correct site. In this case DigiCert IS really a trusted root authority, just like many others, like Symantec, Google, GoDaddy etc.
If my link was to a http://24.24.24.24/pleasedownloadme.crt file, you would really have to think twice before installing it (actually not installing it, since that's the only safe way).
Problems with Trusted Root authorities shouldn't arise that often, and are also handled by Windows Updates,