What to do if there is an error in the https certificate

The main function of the https certificate is to ensure the basic security of the website, and more and more websites have already used it. The installation of https certificate generally requires professional technical personnel to guide, otherwise it is easy to make mistakes. So what is wrong with the https certificate? How to solve it?

Reason 1: The current computer system time is wrong

Because all https certificates have an issuance date and an expiration date, if the computer system time is outside the certificate validity period, the browser may prompt that the website's https certificate has expired or has not yet taken effect. The solution to this situation is to adjust the time of the computer system to within the validity period of the https certificate.

Reason two for the error of the https certificate: the certificate chain is incomplete

When the https certificate application is successful, the service provider will provide the user with multiple certificates (including the server's certificate and one or more CA root certificates), which form a complete certificate chain. Make sure to upload the complete certificate chain instead of only partial certificates in WAF. Please combine the text content of multiple certificates together, and make sure that the server certificate is on the top and the root certificate is on the bottom.

If the certificate chain is incomplete, the opening page may prompt that the certificate is not trusted, and some Android phones, operating systems, or apps may report errors or exceptions when accessing them (access may be normal in some environments).

The third reason for the error of the https certificate: the https certificate of the off-chain website of the current site has expired

The current site references other external chains that have deployed https certificates. If the external chain certificate expires, a corresponding error will be displayed. At this time, it is necessary to revoke the external chain or let the owner of the external chain website go to the CA to replace or renew the certificate.

Guess you like

Origin blog.csdn.net/WoTrusCA/article/details/111571906