7

So I recently have gotten HTTPS errors on Chromium (on trusted sites) returning the following:

NET::ERR_CERTIFICATE_TRANSPARENCY_REQUIRED

Here is a screenshot: Screenshot of Chromium HTTPS Error

I am on Xubuntu Xenial Xerus 16.04 for reference.

7

It's an Ubuntu bug with Chrome 53, so simply upgrade to a newer version.

0
2

Certificate transparency is a way for Google Chrome (and any other browser that chooses to use it) to verify that a certificate has been issued legitimately - not incorrectly or maliciously.

For a certificate that is marked as transparency enabled (it has an oid of 1.3.6.1.4.1.11129.2.4.2 in the certificate). Chrome will check the certificate transparency logs of the issuing certificate authority to make sure the certificate is present.

However, some certificate authorities choose to redact part of the domain name in the logs - particularly for private resources.

The most likely scenario here is that Namecheap has requested the transparency logs be redacted for files.namecheap.com at Geotrust (the issuer) and so Google Chrome cannot verify the certificate was issued legitimately.

Your option here is to raise a ticket with Namecheap and see if they can issue a cert without redaction, and in the meantime add an exception (if you are willing to trust the certificate).

1
  • 1
    Note @thouliha's answer below - there is a bug in some versions of v53 of Chrome, this could be your issue.
    – Paul
    Nov 17 '16 at 22:16

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.