Go Back   Computer Forums > General Computing > Cyber Safety and Computer Security
Click Here to Login
Join Computer forums Today


Reply
 
Thread Tools Search this Thread Display Modes
 
Old 04-22-2014, 09:47 AM   #1
In Runtime
 
Clarence's Avatar
 
Join Date: May 2013
Location: Trinidad
Posts: 109
Question certificate error

I'm a new employee of a company and I'm just a technician. This morning an employee visited with a site they regular visit for company work however it saying that it's an "SSL error" with the certificate.

Here is an attachment of the error


Any suggestions on how to renew the certificate
Attached Images
File Type: png cert.PNG (58.7 KB, 7 views)
__________________

Clarence is offline   Reply With Quote
Old 04-22-2014, 10:35 AM   #2
Fully Optimized
 
ssc456's Avatar
 
Join Date: Jan 2007
Posts: 4,279
Send a message via MSN to ssc456
Default Re: certificate error

It may well be that the sites SSL certificate has indeed expired, it's not unheard of.

My advice would be the site is still safe to visit but I wouldn't be entering any login or sensitive information until they renew their certificate which with any respectable website should be within 24 hours of expiry.
__________________

__________________
He who has never failed has never attempted anything worth succeeding at.

Dont Eat Animals, Its Not Good For Them And They Dont Like It!
ssc456 is offline   Reply With Quote
Old 04-22-2014, 10:45 AM   #3
Wizard of Wires
 
setishock's Avatar
 
Join Date: Feb 2005
Location: Not sure
Posts: 10,030
Default Re: certificate error

Could be they're updating as a precautionary measure.
ssc456 didn't you say the certs had to be reissued when they did that?
setishock is offline   Reply With Quote
Old 04-22-2014, 10:59 AM   #4
Fully Optimized
 
ssc456's Avatar
 
Join Date: Jan 2007
Posts: 4,279
Send a message via MSN to ssc456
Default Re: certificate error

Quote:
Originally Posted by setishock View Post
Could be they're updating as a precautionary measure.
ssc456 didn't you say the certs had to be reissued when they did that?
I don't think that was me
But could quite possibly be the case.
__________________
He who has never failed has never attempted anything worth succeeding at.

Dont Eat Animals, Its Not Good For Them And They Dont Like It!
ssc456 is offline   Reply With Quote
Old 04-23-2014, 06:04 AM   #5
Site Team
 
root's Avatar
 
Join Date: Mar 2004
Posts: 7,999
Default Re: certificate error

the certificate wouldn't have expired as a precautionary measure.

all certificates have a valid time on them.


so for example go to https://www.microsoft.com and click on the padlock and click more information.
in the more information screen select view certificate.

the click on the details tab.

you'll see a heirachy

Baltimore cyber trust root (this is trusted by your computer by default, when you install trusted root updates from windows updates it alters what root authorities it trusts. (sometimes saying, they were crap at that and issued bad certs, don't trust them!) and sometimes issuing new certificate roots as new players enter the game. -certificate roots are also sometimes removed if the private keys are leaked, because then anyone could generate certificates using the certificate authorities private signing key.


you see that microsoft bought their certificate from MSIT Machine Auth CA2.
we don't know who they are, all we care is that they are trusted enough to be given a signing certificate from the company Microsoft internet authority.
and they were trusted enough to be given the certificate from Baltimore Cyber Trust root...


the pane just below that has certificate fields.
if you clisk on subject it'll say CN (common name) = Microsoft Corporation
so if this certificate ends up on google.com then you know something is wrong and you don't trust it.

you'll also see a field marked validity,
with not before 12/01/2013 -meaning that whilst they certificate might have been uploaded to the web servers is won't be able to be used until after this date.

and a second field called not after 12/01/2015 this means that after this time that certificate won't be able to be used.

And it would throw up the error that you see there. unless of course someone pays more money to renew that certificate before it expires and uploads the new certificate.


Basically, the company needs a new cert. you could be friendly and politely point this out to them.
__________________
I didn’t fight my way to the top of the food chain to be a vegetarian…
Im sick of people saying 'dont waste paper'. If trees wanted to live, they'd all carry guns.
"The inherent vice of capitalism is the unequal sharing of blessings; The inherent vice of socialism is the equal sharing of miseries."
root is offline   Reply With Quote
Old 04-25-2014, 02:25 PM   #6
In Runtime
 
Join Date: Feb 2013
Location: UK
Posts: 156
Default Re: certificate error

The Firefox plugin certificate-patrol is also very handy for analysing and visualising certificate data, spotting forgeries and informing you when certificates have changed for sites you visit regularly (all configurable of course, as are all FF plugins)
__________________

_michaelm is offline   Reply With Quote
Reply

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off



All times are GMT -5. The time now is 05:38 AM.


Powered by vBulletin® Version 3.8.8 Beta 4
Copyright ©2000 - 2017, vBulletin Solutions, Inc.
Search Engine Friendly URLs by vBSEO 3.6.0