Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Certification error for IE and FireFox


  • Please log in to reply
5 replies to this topic

#1 anandamide1

anandamide1

  • Members
  • 18 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:83646
  • Local time:11:26 AM

Posted 04 October 2009 - 10:35 PM

Maybe I have bad luck, since this is the second time I've had to post in these forums in the past two months. Lately, both internet explorer and firefox are presenting certification errors at every website I visit, except for this website? And certain sites are not displaying properly. I am not sure if this is due to some kind of configuration, however, I'm kind of paranoid since my last encounter with malware. If anybody knows what is going on, you assistance would be appreciated.

BC AdBot (Login to Remove)

 


#2 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,399 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:11:26 AM

Posted 05 October 2009 - 09:43 AM

There are various types and causes of certificate error messages and certificate security alerts. What specific error you are getting?

Why do certificate errors occur?
Certificate errors occur when there is a problem with a certificate or the server's use of the certificate. Internet Explorer can help keep your information more secure by warning you about certificate errors...

What do the different certificate errors mean?
This website’s security certificate has been revoked.
This website’s address does not match the address in the security certificate.
This website’s security certificate is out of date.
This website’s security certificate is not from a trusted source.
Internet Explorer has found a problem with this website’s security certificate.

About certificate errors
Website is giving expired or invalid security certificate errors

Information you exchange...there is a problem with the site's security certificate.
The security certificate was issued by a company you have not chosen to trust.
The name of the security certificate is invalid or does not match the name of the site.
The security certifcate has expired or is not yet valid.
This page contains both secure and nonsecure items.

Common SSL Certificate Errors
Secure and NonSecure Items Warning Message

In general, any website that wants to secure their site or some of it's pages with Secure Sockets Layer (SSL) must obtain a valid certificate from a trusted third party Certificate Authority (CA). A server certificate is used for authentication. There are many different types of certificates and separate certificates for every browser. Web browsers include a number of "root certificates", which belong to CAs and are distributed with 'trust bits' set by default. Browser manufacturers choose whose root certificates to include. A number of well-known CAs, such as Verisign and Geotrust, have their root certificates in all major browsers.

With Microsoft, certification authority providers are required to complete a WebTrust for Certification Authorities audit or provide an equivalent third-party attestation. See Microsoft Root Certificate Program Members. All new root certification authorities for Windows XP are made available to end users through the Windows Update certificate trust list (CTL). This provides maximum flexibility for CA providers and Microsoft to respond immediately in the event of an unforeseen security issue. Some anti-virus vendors require the installation of the Microsoft Root Certificate update before allowing installation.

If you try to enter a secure website that uses an expired certificate, you will get a secure website warning such as "The certificate for "secure.monpay.com" expired Jun 16 23:59:59 2006 GMT. The webmaster should update the certificate(s)." When you try to view something on a secure server and get such a message this means you need to download a new certificate. If you choose to agree to accept this certificate you will be able to enter the secure site, providing it is a secure and valid site, and not an exploit or a redirected malicious site.

Useful links to learn more about Certificates and how they work:
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#3 anandamide1

anandamide1
  • Topic Starter

  • Members
  • 18 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:83646
  • Local time:11:26 AM

Posted 06 October 2009 - 06:42 PM

Thank you for replying. I did not take a screen shot of the certification error. However, the problem is not persisting. My main concern is the error occurred no matter what site I went to. This happened in both microsoft IE and firefox. I wen browsing to a few sites I have never been to today just to see if I could recreate the warning. Im sorry if wasted any time, I do appreciate the information, though.

Thank you.

#4 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,399 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:11:26 AM

Posted 06 October 2009 - 09:31 PM

You're welcome.

At least you will have the info in case it happens again.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#5 anandamide1

anandamide1
  • Topic Starter

  • Members
  • 18 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:83646
  • Local time:11:26 AM

Posted 08 October 2009 - 09:50 AM

I definately appreciate the information. Although, I did capture the warning.



This Connection is Untrusted











You have asked Firefox to connect
securely to onlineeast2.bankofamerica.com, but we can't confirm that your connection is secure.



Normally, when you try to connect securely,
sites will present trusted identification to prove that you are
going to the right place. However, this site's identity can't be verified.







What Should I Do?





If you usually connect to
this site without problems, this error could mean that someone is
trying to impersonate the site, and you shouldn't continue.











Technical Details



onlineeast2.bankofamerica.com uses an invalid security certificate.

The certificate is not trusted because the issuer certificate has expired.
The certificate will not be valid until 4/15/2009 4:30 AM.

(Error code: sec_error_expired_issuer_certificate)







I Understand the Risks

#6 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,399 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:11:26 AM

Posted 08 October 2009 - 10:24 AM

...Seeing the alert does not necessarily mean that the website you're visiting is trying to trick you into believing it is a different website - it means that Firefox isn't able to verify the identity of the website, and that you should proceed carefully...

There are several problems that can cause Firefox to reject a certificate...This article will describe some of the common warnings you can receive with the heading This connection is untrusted.

Firefox: This connection is untrusted
This Connection is Untrusted? What These Browser Warnings Mean

Edited by quietman7, 08 October 2009 - 10:27 AM.

.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users