1

I am trying to visit gimp.org using Chrome 89 on Windows 7. I get the ERR_CERT_AUTHORITY_INVALID error. I have looked at various stackexchange answers as well as several other resources and here is a list of the steps I have tried:

  • Verified the expiration date of the certificate (1/11/21 to 4/11/21, issued by R3)
  • Tried a hard refresh
  • Tried visiting gimp.org in "incognito" mode
  • Cleared cache (images, files, cookies and other site data)
  • chrome://restart
  • Updated Chrome
  • Cleared SSL Slate under Internet Options
  • Uninstalled and reinstalled Chrome
  • Disabled all extensions
  • Verified that SSL Labs reports "A" for gimp.org
  • Under chrome://net-internals/#dns, clicked "Clear Host Cache"
  • Looked through all running processes and didn't see anything suspicious
  • Disabled anti-virus

I tried visiting in Firefox and the error doesn't occur. I also tried on Chrome on another computer and the error doesn't occur.

So, the problem doesn't seem to be with the website, or with my browser, or with the certificate, or with my operating system. I don't know what else to try.

Improve this question
3
  • 1
    Which certificate authority has signed the certificate? A 3 month certificate is sort of weird
    – Ramhound
    Mar 9, 2021 at 4:20
  • 1
    @Ramhound: "A 3 month certificate is sort of weird" - it is actually pretty standard with certificates issued by Let's Encrypt. And this specific certificate is issued by Let's Encrypt.
    – Steffen Ullrich
    Mar 9, 2021 at 6:12
  • chrome://restart fixed the issue I had with my self signed certificate that I added to my Trusted Authorities
    – CervEd
    Nov 19, 2021 at 7:24

1 Answer 1

Reset to default
1

From what you've described, your version of Windows 7 does not have the necessary CA certificates. As per the Lets Encrypt certificate page, you can download it from the IdenTrust download page, choose the Root Certificate Download under the "TrustID X3" section and double-click in Windows 7 to add it.

As an aside, Windows 7 is no longer supported by Microsoft so it might be worth looking to upgrade in order to stay safe on the Internet.

Improve this answer
2
  • I downloaded and installed the certificate but to no avail, unfortunately. I really prefer Windows 7 over Windows 10, but given the lack of support I may end up upgrading as you suggest...
    – master_latch
    Mar 14, 2021 at 23:36
  • Can you post the certificate chain that's failing? It's called the Certification Path in Windows 10 if that helps and you can get to it through the lock icon to the left of the website name in Chrome.
    – Quetza
    Mar 15, 2021 at 10:21

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.