4

My site has a valid certificate, but Chrome marks it as insecure.

I tried my site using Brave and Firefox, and both mark it as secure.

I also ran this online test, and everything looks fine:

https://mxtoolbox.com/Pro/#/lookup/https:beauchamp.me

I am running Version 69.0.3497.100 (Build officiel) (64 bits) on a MacBook Pro.

In some threads I read this can happen if the date and time on my computer are incorrect, but they are correct.

  • 2
    Works fine for me on Chrome 69 and 70 on a MacBook Pro running macOS Mojave 10.14. Is there any chance you were playing around with HTTPS Public Key Pinning? If so, maybe you pinned an old public key and now Chrome thinks your new cert's public key is an impostor. – Spiff Oct 18 '18 at 1:57
  • It also works fine for me. Any chance you were messing with the certificates and then updated to your current one and Chrome just has the old one cached still? You can try clearing all of the settings in Chrome for your site and have it download the proper certificate. – HazardousGlitch Oct 18 '18 at 2:00
  • Spiff Thanks for checking! No, I haven't been playing with Public Key Pinning. Not knowingly in any case. – Jean-François Beauchamp Oct 18 '18 at 2:31
  • @HazardousGlitch, I am reluctant to clear all my settings. Or did you mean cache by the way? I will check if I manage to clear it just for my site. – Jean-François Beauchamp Oct 18 '18 at 2:32
3

I found what it was. After updating Chrome and restarting it, the lock sign was fine. Chrome did not mark my site as insecure anymore. However, as soon as I accessed my server on another port with a self-signed certificate, and I accepted browsing despite the self-signed certificate warning given in Chrome, my site got marked as insecure, even on the tab where I was accessing the standard port (443).

  • 1
    Thanks! If you don't want to close down all your tabs to restart Chrome, you can also just open up an incognito tab and go to the site there to check if the certificate is working. – kevinmicke Mar 12 at 16:28
  • UGH--i had to actually uninstall then reinstall chrome to get it to accept the cert. i've done this a million times and this hasn't happened before, so chrome must have changed things. Fun. – Dr. C. Hilarius Mar 21 at 18:37
0

Since you don't want to reset all of your settings (I don't blame you), here is a link on how to find and delete the specific certificate for your site:

http://lists.gno.org/cert-maint-mac-10.5.8/

I don't have a Mac so I wasn't able to actually go through the directions to test it.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.