none
SSL Certificate Errors on new PCs only? RRS feed

  • Question

  • On a newly imaged PC, we get SSL Certificate warnings in Edge, IE and Chrome (but not Firefox) when we go to our corporate website on the Internet.  We get the error code:  "dlg_flags_invalid_ca" and browsers say the website is not safe.

    The website has a Wildcard SSL Cert from GoDaddy.

    We do not get this warning outside our internal network.  My PC at home shows no SSL warnings with Chrome, IE, or Firefox.

    This only seems to happen on new Windows 10 PCs.

    Any ideas?

    Wednesday, August 2, 2017 7:10 PM

All replies

  • Is this just one pc or all newly imaged ones?

    What is the certificate authority for the domain (ca)? Do you have to add a root cert normally?

    What does https://www.ssllabs.com/ssltest/ report about the site?

    Wednesday, August 2, 2017 9:53 PM
  • Is this just one pc or all newly imaged ones?

    What is the certificate authority for the domain (ca)? Do you have to add a root cert normally?

    What does https://www.ssllabs.com/ssltest/ report about the site?

    Seems to be all newly imaged ones, both Windows 10 and Windows 7.  We have not setup a CA for the Domain.

    SSL Labs graded it a "T" and "B" is trust issues are ignored.

    SSL Shopper says:  The certificate is not trusted in all web browsers. You may need to install an Intermediate/chain certificate to link it to a trusted root certificate.

    Digicert Tester says:  SSL Certificate is not trusted

    The certificate is not signed by a trusted authority (checking against Mozilla's root store). If you bought the certificate from a trusted authority, you probably just need to install one or more Intermediate certificates. Contact your certificate provider for assistance doing this for your server platform.

    Wednesday, August 2, 2017 11:28 PM
  • Hi,

    Check the following article:

    https://support.microsoft.com/en-in/help/931850/-there-is-a-problem-with-this-website-s-security-certificate-when-you

    In addition, for further support, please ask in certificate forum for more professional help:

    https://social.technet.microsoft.com/Forums/windowsserver/en-US/home?forum=winserversecurity

    The reason why we recommend posting appropriately is you will get the most qualified pool of respondents, and other partners who read the forums regularly can either share their knowledge or learn from your interaction with us. Thank you for your understanding.


    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Friday, August 4, 2017 6:58 AM
    Moderator
  • This ended up being a problem on the Network Solutions side.  The GoDaddy SSL Cert was not installed correctly by Network Solutions web hosting.
    Monday, August 7, 2017 8:55 PM
  • Thank you for sharing your solutions and experience here. It will be very beneficial for other community members who have similar questions.


    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Tuesday, August 8, 2017 8:07 AM
    Moderator