Firefox says Peer's Certificate has been revoked

David Newman dnewman at networktest.com
Tue Dec 21 02:34:37 MSK 2010


On 12/20/10 1:41 PM, Igor Sysoev wrote:

> I'm not sure, but probably the last (#3) GoDaddy certificate in the bundle
> may cause the issue. OpenSSL without preloaded certificate base indicates
> it as self signed:
> 
>> openssl s_client -connect mail.cvcbike.org:443
> CONNECTED(00000003)
> depth=3 /L=ValiCert Validation Network/O=ValiCert, Inc./OU=ValiCert Class 2 Policy Validation Authority/CN=http://www.valicert.com//emailAddress=info@valicert.com
> verify error:num=19:self signed certificate in certificate chain
> verify return:0
> ---
> Certificate chain
>  0 s:/O=mail3.networktest.com/OU=Domain Control Validated/CN=mail3.networktest.com
>    i:/C=US/ST=Arizona/L=Scottsdale/O=GoDaddy.com, Inc./OU=http://certificates.godaddy.com/repository/CN=Go Daddy Secure Certification Authority/serialNumber=07969287
>  1 s:/C=US/ST=Arizona/L=Scottsdale/O=GoDaddy.com, Inc./OU=http://certificates.godaddy.com/repository/CN=Go Daddy Secure Certification Authority/serialNumber=07969287
>    i:/C=US/O=The Go Daddy Group, Inc./OU=Go Daddy Class 2 Certification Authority
>  2 s:/C=US/O=The Go Daddy Group, Inc./OU=Go Daddy Class 2 Certification Authority
>    i:/L=ValiCert Validation Network/O=ValiCert, Inc./OU=ValiCert Class 2 Policy Validation Authority/CN=http://www.valicert.com//emailAddress=info@valicert.com
>  3 s:/L=ValiCert Validation Network/O=ValiCert, Inc./OU=ValiCert Class 2 Policy Validation Authority/CN=http://www.valicert.com//emailAddress=info@valicert.com
>    i:/L=ValiCert Validation Network/O=ValiCert, Inc./OU=ValiCert Class 2 Policy Validation Authority/CN=http://www.valicert.com//emailAddress=info@valicert.com

Thanks, Igor. I am checking now with GoDaddy and will report back.

dn




More information about the nginx mailing list