WRF security certificate invalid - site insecure

[BlackCat1982]

Been having trouble logging in last day or so, my browser says that this site is insecure, the security certificate being invalid amongst other things. Anyone else had problems?

[reneblacky]

Is it the same problem this fella had? I think I had this issue many years back? and I had to unblock WRF's domain name from my internet providers side but I can't remember exactly what I did!! Sorry. I tried searching for the thread on it but I could only find this one!

Need to accept security cert to log in.

[SHEMP H]

I'm having the same problems on this and three other forums but not the websites??

[Jerry B]

Same problem for me

[Jerry B]

I only have this happening but on my phone, on my computer no problem

[BlackCat1982]

Logging on fine on my phone and today OK on PC. Hopefully it was just a temporary glitch.

[SHEMP H]

Logging in o.k. on my phone but not my tablet or pc

[HoundsTooth]

Check the cert chain is valid. In Chrome you do this by clicking the padlock:



Check the certificate dates are valid (typically certificates via hosting companies 'roll forward' automatically and may have a short period of 3 months):



If using Windows - check you have all updates applied.
If using Chrome - check you are using latest version.

If browsing at work, check your company firewall is not causing issues with some certificate chains.

All of the above issues can happen when a site uses less common (cheaper / newer) certificates.
* Cheaper / newer doesn't mean less secure - just occasionally these issues.

Nick

[SHEMP H]

My tablet is o.k. now ,thank you guys, however not my PC but it's old and outdated anyway like me ,time for a new one������

[HoundsTooth]

My tablet is o.k. now ,thank you guys, however not my PC but it's old and outdated anyway like me ,time for a new one������

Possibly. What OS is your PC?
I am using Windows 10 with Chrome 94.0.4606.71

When you look at the chain of certificates - as seen in my first picture above - your PC must trust the first certificate (the root) - which in this case is ISRG Root x1.
On the 30th September 2021, the old root expired (DST Root CA X3):
Let'''s Encrypt DST Root CA X3 expiry Sept 30th 2021 | Certify The Web Docs

It is possible that WRF was previously using this, but as part of their update certificate the chain now points to the new root.

Your OS, web browser must be up to date and see these 'newer' root certs.
Some companies (EG: Verisign), are well trusted and nearly all OS and browsers see their certs.
Others, such as the cert above - they are probably still trusted - but you just need to make sure everything is up to date.

It's a bit like using a cheaper tyre over say Firestone / Michelin / Pirelli - is it as good? Yeah.
Is it as well known - no.

So it's not necessarily the age of the PC, but the software it runs.

I know also, that company firewalls / Anti-virus software / VPNs can also affect this - i've seen this many times in my job.

And finally - the certificate itself is secure - it uses the same technology as your bank.
So that is good to know :-)

nick