GEOTRUST - The certificate not trusted error indicates that the SSL certificate is not signed or approved by a company that the browser trusts. This occurs most often for one of the following reasons:
- The web site is using a self-signed certificate. Self-signed certificates can be generated for free but they don't provide as much trust as a commercial certificate. You can tell your browser to trust the self-signed certificate or you can buy (or ask the site owner to buy) a trusted SSL certificate from a certificate authority.
- The web site is using a free SSL Certificate. Free SSL Certificates are issued by a couple of free certificate authorities but their Root Certificate must be manually imported to each browser to get rid of this error.
- The web site is using a trusted SSL certificate but it is missing a chain/intermediate certificate. Most trusted certificates require that you install at least one other intermediate/chain certificate on the server to link your certificate up to a trusted source.
Resolution
Step 1 - Download the GeoTrust Intermediate CA file for your SSL product type:
Note: You MUST install correct GeoTrust Intermediate CA file on your server for your SSL certificate to work and be fully supported in all web browsers.
Skip to step 3 If you have already downloaded the CA file otherwise select your SSL product type below to download the GeoTrust Intermediate CA (Right Click on link & Save)
Step 2 - Create a Certificate Snap-in:
Note: Please ensure for step 8 to select 'Computer Account', selecting any other option will result in a failed installation.
- From the Web Server, Click Start > Run
- Type in MMC and Press Enter
- Click OK
- From the Microsoft Management Console (MMC) menu bar, Click File (in IIS 6.0) or Console (in IIS5.0) > Add/Remove Snap-in
- Click Add
- From the list of snap-ins, Select Certificates
- Click Add
- Select Computer Account
- Click Next
- Select Local Computer (the computer this console is running on)
- Click Finish
- In the snap-in list window, Click Close
- In the Add/Remove Snap-in Window, Click OK
Step 3 - Install the GeoTrust Intermediate CA file:
- From the left pane, Expand the 'Intermediate Certification Authorities' folder
- Right-Click on 'Certificates' folder
- Click All Tasks > Import
- In the Certificate Import Wizard, Click Next
- Click on Browse and locate the Intermediate CA Certificate File (The PKCS#7 file you downloaded in step 1)
- Click Next
- Select option 'Place all certificates in the following store'
- Click Browse button and select 'Intermediate Certification Authorities'
- Click OK
- Click Next
- Click Finish
Step 4 - Check the following:
With MMC and the Certificates snap-in still open, expand the Trusted Root Certification Authorities folder on the left and select the Certificates sub-folder.
Locate the following certificate:
Common Name - GeoTrust Global CA
Expiry Date - May 21, 2022
Thumbprint - de 28 f4 a4 ff e5 b9 2f a3 c5 03 d1 a3 49 a7 f9 96 2a 82 12
If this certificate is present, it must be disabled.
- Right click the certificate
- Select Properties
- In the Certificate purposes section, select 'Disable all purposes for this certificate
- Click the 'OK' button.
Close MMC - there is no need to save console settings.
Note: Please restart your web server for the changes to propagate immediately. If you choose not to restart the server, restart the webservice and allow upto 30minutes for the changes to take effect.
Verify the installation of the GeoTrust certificate chain using our SSL checker:
https://knowledge.geotrust.com/support/knowledge-base/index?page=content&id=SO9557
Disclaimer:
Geotrust has made efforts to ensure the accuracy and completeness of the information in this document. However, Geotrust makes no warranties of any kind (whether express, implied or statutory) with respect to the information contained herein. Geotrust assumes no liability to any party for any loss or damage (whether direct or indirect) caused by any errors, omissions, or statements of any kind contained in this document.
Further, Geotrust assumes no liability arising from the application or use of the product or service described herein and specifically disclaims any representation that the products or services described herein do not infringe upon any existing or future intellectual property rights. Nothing herein grants the reader any license to make, use, or sell equipment or products constructed in accordance with this document. Finally, all rights and privileges related to any intellectual property right described herein are vested in the patent, trademark, or service mark owner, and no other person may exercise such rights without express permission, authority, or license secured from the patent, trademark, or service mark owner. Geotrust reserves the right to make changes to any information herein without further notice.
Article ID: 75, Created On: 7/10/2011, Modified: 11/1/2013