Getting: NET::ERR_CERT_DATE_INVALID

DENNIS NICHOLS 26 Reputation points
2021-10-01T21:18:58.673+00:00

I keep getting this: NET::ERR_CERT_DATE_INVALID using Chrome and some web pages won't load [other pages do load], IExplore won't access these pages also. I found the certificate for the: DST Root CA X3 has expired. Investigating, I found a reference to: 48504E974C0DAC5B5CD476C8202274B24C8C7172. I run Windows 7 64 bit and found teh SystemCertificates locations in the registry. How do I remove this old certificate and replace with the proper one? Thank You, Dennis Nichols.

Windows
Windows
A family of Microsoft operating systems that run across personal computers, tablets, laptops, phones, internet of things devices, self-contained mixed reality headsets, large collaboration screens, and other devices.
4,638 questions
{count} votes

10 answers

Sort by: Most helpful
  1. Fahrul Putra 86 Reputation points
    2021-10-02T05:26:02.257+00:00

    I'm getting the same problem, this is might be caused by the latest Windows Update. Once again, what's wrong with you windows.

    Edit :

    Turns out, the certification is expired

    Finally, i've found the way :

    Win + r. and type “certmgr.msc”

    Then, delete 3 items :
    R3 Certificate and DST ROOT CA X3

    To delete, just win + r “certmgr.msc” then go thru :

    1. Trusted Root Certification Authorities > Certificates
    2. Intermediate Certification Authorities > Certificates
    3. Third-party root Certification Authorities > Certificates

    Right click, and press delete

    To locate the right certificate :
    Just use Issued By and Expiration Date, search for certificate issued by DST ROOT CA X3, and expired around 29-30 sept 2021.

    Install new certificate :
    Download this : https://letsencrypt.org/certs/isrgrootx1.der
    Double click it.
    Then, Choose Local Machine, Next
    Choose Place all Certificates in the following store, and then choose "Trusted Root Certification Authorities" folder

    Restart your PC

    Worked for WIN 7 and WIN 10 ( Tested )

    3 people found this answer helpful.

  2. DENNIS NICHOLS 26 Reputation points
    2021-10-03T03:33:45.453+00:00

    Thank You, FahrulPutra-6017. I had to do some clean-up of my computer files before I could do what you suggested. I tried using Chrome to download isrgrootx1.cer and it gave me: NET::ERR_CERT_DATE_INVALID. Fortunately, I had IExplorer and went to site and it warned me not to trust it, but I went ahead and accessed and got the download with no problem. YAY, IExlporer; BOO, Chrome.
    Running certmgr.msc, I went to Trusted Root Certification Authorities > Certificates and deleted DST ROOT CA X3; then to Intermediate Certification Authorities > Certificates and deleted DST ROOT CA X3; finally to Third-party root Certification Authorities > Certificates - nothing to delete.
    When I ran isrgrootx1.cer, I selected "Automatically select the certificate store based on the type of certificate". And the websites didn't work after a restart. I ran it again and this time selected: "Place all certificates in the following store". I then placed ISRG Root X1 in: 1)Trusted Root Certification Authorities > Certificates; 2) Intermediate Certification Authorities > Certificates and 3) Third-party root Certification Authorities > Certificates.
    After restart, the websites were able to be accessed with no problem. One thing, when I ran certmgr.msc again and noticed DST Root CA X3 is back! It's in: Trusted Root Certification Authorities and Third-party root Certification Authorities, but not in: Intermediate Certification Authorities. Anyway, I just wanted to say: "THANK YOU". Dennis Nichols

    1 person found this answer helpful.

  3. Veronica Mancini 1 Reputation point
    2021-10-03T20:16:27.127+00:00

    I had the same problem and didn't know how to solve it.
    I followed your instructions and it worked! THANK YOU @Fahrul Putra !

    0 comments No comments

  4. Limitless Technology 39,296 Reputation points
    2021-10-04T10:39:15.12+00:00

    Hi there,

    SSL certificates do expire, so if you see this error NET::ERR_CERT_DATE_INVALID, it may be time to have your certificate reissued. You can quickly check this right from Chrome.

    Start by clicking on the three dots in the top-right corner of the browser window. Then select More Tools > Developer Tools:
    Navigate to the Security tab, where you’ll be able to see if the certificate is valid. You can click on the View Certificate button to get more details, including the certificate’s expiration date
    If it is expired try updating them


    If the reply is helpful, please Upvote and Accept it as an answer

    0 comments No comments

  5. ana youtube 1 Reputation point
    2021-10-06T17:21:37.453+00:00

    thenk you so much i was looking for the solution the last 3 days i think that all windows 7 users have this problem now and u'r solution works thanks bro

    0 comments No comments