Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I am receiving SSL certificate errors from Chrome (latest version (23.0.1271.52 beta-m) and Internet Explorer 6 (not used) on my home desktop machine (Windows XP SP2). In Firefox, the site works fine on this PC. My laptop and work desktop (both Windows 7) also seem to work just fine. Most SSL website checking sites report that the certificate and chain up to the root CA are setup correctly, but I have come across about 2 that that say I have an invalid certificate but don't give much information on which piece is failing.

I know it used to work properly on this desktop (in Chrome and IE) in the past, but I'm not sure what has changed that is causing the site to fail in these browsers. Can anyone provide any assistance? This is driving me nuts!

Screenshot of error:

http://i.imgur.com/cDD6P.png

share|improve this question

2 Answers 2

up vote 2 down vote accepted

The issue was surrounding the certificate's hashing algorithm (SHA2-256) which isn't supported by these versions of Windows.

KB968730 - Windows Server 2003 and Windows XP clients cannot obtain certificates from a Windows Server 2008-based certification authority (CA) if the CA is configured to use SHA2 256 or higher encryption.

Many thanks to the author of this great article where I found the answer.

share|improve this answer

Try update windows - there are updates for the certs database that might solve this problem.

share|improve this answer
    
The only update available at this point is to upgrade to Windows XP Service Pack 3. I think you might be on to something, but really don't want to upgrade and have it not work. The part that doesn't make sense and is keeping me from trying that is, why would it stop working? –  Nico M Nov 1 '12 at 12:44
    
Because maybe the site changed their cert issuer. And I think that MS sometimes takes off certs during updates. You can take a backup image jnust in case you'd want to roll back, or you can try install the Chain Root Cert of this issuer. –  EliadTech Nov 1 '12 at 13:13
    
I operate the site and the certificate hasn't changed. Also, the root and intermediate certs are showing as trusted. –  Nico M Nov 1 '12 at 13:36
    
I've just found that Windows Server 2003 SP2 (both IE and Chrome latest versions) are displaying the same errors. Driving me nuts. Anyone have any suggestions? –  Nico M Nov 6 '12 at 7:41

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.