Secure Certificate Problem

Question

I recently installed a secure certificate for a web site I help maintain. When I'm at work and on the network where the webs server is I can navigate to secure pages (https) fine. When I try to access the same pages from outside the network (like from home) I get an error. Here is an example page from my web site: https://www.acpe.org/MyACPE/Activity/MyActivity.aspx

I assumed it might be our barracuda firewall but we completely turned it off and the problem persisted. I checked the certificate here at Verisign and it says it's fine:

I'm at a loss. I'd appreciate any help. Thank you!

Answer 1

It appears the cert expired in 2004. This is the information I get using Netscape 4.5.1:

This Certificate belongs to: Class 3 Public Primary Certification Authority VeriSign, Inc. US

                           This Certificate was issued by:
                             Class 3 Public Primary Certification
                             Authority
                             VeriSign, Inc.
                             US

Serial Number: 00:E4:9E:FD:F3:3A:E8:0E:CF:A5:11:3E:19:A4:24:02:32 This Certificate is valid from Sun Jan 28, 1996 to Wed Jan 07, 2004 Certificate Fingerprint: 78:2A:02:DF:DB:2E:14:D5:A7:5F:0A:DF:B6:8E:9C:5

Answer 2

Verisign's OCSP responder says that your certificate has been revoked.

It's likely that some environments you are using for testing don't have OCSP enabled. You can test this by disabling OCSP checks in a browser that currently fails. It should start working after that.

If your certificate is revoked, you should get another.

---

Verisign has issued several certificates for www.acpe.org. The one that is still valid has the serial number 27583686efafc6484ac19d7ce82be271. The one that www.acpe.org is currently configured to use is revoked, and has a serial number of 21ee7e042a53142a9f5075fc2dbff37a. I haven't been able to get OpenSSL's ocsp tool to work, so I can't see the "reason" code being given, but judging from the info there, a replacement was requested on February 10 by the certificate owner. Make sure that you correctly installed the new certificate.

You can see this status information through Verisign's certificate repository tool by entering the common name "www.acpe.org".

Answer 3

From what I can tell the certificate was revoked. Are you sure you installed a valid certificate?