SSL Certificate error?

Okay guys, apparently theres a security certificate problem on my website, so im asuming thats with the SSL.

This only pops up in the latest internet explorer, it dosent appear in firefox, IE 6 or safari (on my Iphone)

Screenshot included.

Url to site:

https://www.martinpollardart.co.uk

any ideas would be GREATLY appriciated.

https://extended-validation-ssl.geotrust.com/dot_clear.gif

This seems to be the issue according to the privacy report.

I have the Geotrust Sidebox installed, could this be causing the issue?

any ideas ?

I am not getting any error in IE8.

Check your IE configuration, the error may be just related to your own IE settings.

frank18:

I am not getting any error in IE8.

Check your IE configuration, the error may be just related to your own IE settings.

Thats what i thought, but its happened on my uncles machine, whos website it is, and he gets the privacy icon in the bottom right corner on his IE, and its a new machine on defaults.

I personally use firefox, but downloaded the latest IE to see for myself and it did happen like that, and i didnt change settings.

jmp04:

Thats what i thought, but its happened on my uncles machine, whos website it is, and he gets the privacy icon in the bottom right corner on his IE, and its a new machine on defaults.

I personally use firefox, but downloaded the latest IE to see for myself and it did happen like that, and i didnt change settings.

Should also say this is the original screenshot taken from a fresh install of IE8, nothing was changed on it

heres a screenshot from my uncles machine

Okay, those of you interested, the SSL certificate error is happening on IE8, (Firefox, google chrome, Safari, opera all ok).

Theres no error on the home page anymore (ive removed the Site seal box and images), but now when you go and click on "login" it comes up with the error there. Nightmare.

Onto my Provider (HeartInternet who have resold the GeoTrust SSL as they dont provide the details so you can purchase direct from GeoTrust)

Will keep you all informed.

I made the mistake some time ago of upgrading iE 7 to iE 8, and immediately started having exactly the same problem with sites which used Extended Validation Certificates. So I downgraded back to iE 7, but the problem (which only started when I upgraded to iE 8) persisted in iE 7. So I upgraded back to iE 8 again, as it made no difference.

I have no problem with exactly the same websites when using Firefox or Safari.

Just ask Heart Internet if they installed a Root Certificate. Not all standard 1024 bit SSL Certs need a Root Certificate, but all 2048 bit Certificates do and that includes Extended Validation Certs.

Vger

Vger:

I made the mistake some time ago of upgrading iE 7 to iE 8, and immediately started having exactly the same problem with sites which used Extended Validation Certificates. So I downgraded back to iE 7, but the problem (which only started when I upgraded to iE 8) persisted in iE 7. So I upgraded back to iE 8 again, as it made no difference.

I have no problem with exactly the same websites when using Firefox or Safari.

Just ask Heart Internet if they installed a Root Certificate. Not all standard 1024 bit SSL Certs need a Root Certificate, but all 2048 bit Certificates do and that includes Extended Validation Certs.

Vger

Cheers for that but its not an extended validation SSL it is:

Standard SSL

Perfect for business start ups & small sites looking for personalised security & to give visitors extra reassurance.
Extended Verification SSL

• Provided by GeoTrust

• Domain authentication

• 40-bit to 256-bit SSL encryption

• Basic GeoTrust® True Site Seal

• $10,000 warranty

I will mail them and ask about Root Cert though :)

Well, "Extended Verification" was the name used when "Extended Validation" was first introduced back in 2007.

The link you provided earlier on was to a Geo Trust "Extended Validation" page.

Vger

Vger:

Well, "Extended Verification" was the name used when "Extended Validation" was first introduced back in 2007.

The link you provided earlier on was to a Geo Trust "Extended Validation" page.

Vger

Indeed, but that was the error that was coming up on the Site Seal smart icon.

Just tracr routing in command prompt as the techys want a better look at something.

Its strange that it only happens in IE8 when clicking on "Log In" :(

Well, I admit to not checking it for iE 8 before now. I have just checked in my iE8 and I'm not getting any errors - on any https page.

Try clearing your Temp Files from iE 8?

Vger

Okay, one problem I can see is that most certificates these days work for both https://www.yourdomain.com and for just yourdomain.com, but yours only works for https://www.yourdomain.com

When I went to https://martinpollardart.co.uk/index.php?main_page=login I got a '403 Forbidden' message and the SSL Cert was for web45.secure-secure.co.uk

I don't know if this is a hosting or Geo Trust issue.

Vger

Vger:

Okay, one problem I can see is that most certificates these days work for both https://www.yourdomain.com and for just yourdomain.com, but yours only works for https://www.yourdomain.com

When I went to https://martinpollardart.co.uk/index.php?main_page=login I got a '403 Forbidden' message and the SSL Cert was for web45.secure-secure.co.uk

I don't know if this is a hosting or Geo Trust issue.

Vger

Many thanks for taking the time out to have a look for me, it really is appriciated.

It should not be pointing at https://martin....... it should be at, https://www.martin.......

At least thats how i wrote it in the .htaccess file. ( i have tried the setup with and without the file fyi)

I have also cleared cache, temp files, and all forms of data possible, aswell as a /flushdns all to no avail.

I have the tech administrator at heart now on the case and there looking into it further as there nothing wrong with my coding according to them, and they think its an issue at their end now.

(after two hours of chatting, still at least it isnt 2 days or so like godaddy)

Ummm....

there saying its not an issue as its installed correctly etc...

It is still happening on my IE8. Maybe its an issue with a fresh install with no updates.

One of the tech support guys thinks it may be due to the fact it hasnt fully propergated yet, as its only been up a matter of hours (not days yet) and to see how it goes shortly.

Still annoying when i know on my netbook (Win 7 Ultimate on defaults) to shows, and thats running via the same router, and its fine on firefox on this machine (Win XP Pro SP3) and fine on the machines firefox downstairs (XP Home), but on the IE8 on the XP machines its just not working at all.

Stumped.

You do need to allow a minimum of 24 hrs if the domain has only recently been pointed to your dns addresses, and it could be 48 or even 72 hrs before all ISPs update their dns caches. In some parts of the world (USA and Australia especially) and if you are moving from one web host to another you may even have to get the old web host to completely delete your hosting from the old server before ISPs update their dns caches.

But it may also be a local dns caching issue, so try this. In your iE8 browser, not open at your website, go to Tools --> Internet Options, and delete all temporary files. Close down all programmes. Go to Start --> Run and type this in:

ipconfig /flushdns - and then click 'OK'

and do it 3 or 4 times to be sure. Then shut down the PC and reboot. This will clear any local ip caching.

Vger

I did try flushdns already, but willl give it another go, and didnt realise it could take that long to propogate.

Ill see how it goes over the next few hours/day and go from there

Your site appears to work with the www on it now on the secure pages ... are you still having problems?

NOTE: I do get the failure if I remove the www from the secure URL ...

.....and normally, when a site is added to a server then it is added as just 'yourdomain.com' and the www. is automatically added as an A Record. It seems that your server works in reverse and that https://www.yourdomain.com is set up but that there's no record for just 'yourdomain.com' - which is why it reverts to a server SSL Certificate if you try to use that address. That's something you'll probably have to get Heart Internet to sort out.

Vger

Vger:

.....and normally, when a site is added to a server then it is added as just 'yourdomain.com' and the www. is automatically added as an A Record. It seems that your server works in reverse and that https://www.yourdomain.com is set up but that there's no record for just 'yourdomain.com' - which is why it reverts to a server SSL Certificate if you try to use that address. That's something you'll probably have to get Heart Internet to sort out.

Vger

I dont think i fully understand.
Are you saying that it should be set up for mydomain.co.uk and zencart automatically adds the www. infront of it, and its still secure? But for some reason mine is setup for https://www.mydomain.co.uk and the https:// is having an issue as theres no www.? (this should be okay as there is .htaccess file inplace to force it to the www.)

Or is the SSL i have valid only for https://www.mydomain.co.uk and should be valid for this aswell as mydomain.co.uk ?