Microsoft Internal CA Issues certificate not getting trusted on

Question

Hello Forum Members,
Good Day,

I have implemented Internal Microsoft CA server and issued certificate to our internal web server by having CSR from the server, we noticed that the web server getting trusted and secure pad lock in the IE Browsers only. All other browsers prompting https error, I have tried below.

1. Imported the Root CA and subjected certificate to all computers and to the browsers
2. Since the Computers are in Domain network, pushed the root CA via group policy.

However the Certificate still on the same error on all other browser's, how can we fix the problem to have trusted on all the browsers to utilize the internal CA

Internal CA Server : Windows Server 2012,

Appreciated any expert advise.
Thank you.

Answer 1

Hi,

When you click the http error what is the message you get on the screen? Please provide that error or screenshot.

Answer 2

HI

Many thanks for your reply. attached the screen shot,

Note. Hide the domain for security reason

Answer 3

Hi,

Does the CN name matches your WebURL? as in URL is supportdemo.contoso.com and in the certificate the CN is set to supportdemo.contoso.com?

Can you provide the other browser details that is not working version details.

Thanks.

Answer 4

Hello there,

This message usually presents when you are using an SSL certificate that has not been issued by a known Root CA.

What can happen in the scenario you are experiencing is usually caused by one of the following:

1. Your SSL certificate was signed/authorized by a Root CA that your browser does not recognize
2. Your SSL certificate is a self-signed certificate, which is mainly used in testing and not recommended in production environments.

This article provides a workaround for an issue where valid root CA certificates that are distributed by using GPO appear as untrusted https://learn.microsoft.com/en-us/troubleshoot/windows-server/identity/valid-root-ca-certificates-untrusted

---------------------------------------------------------------------------------------------------------------------------------

--If the reply is helpful, please Upvote and Accept it as an answer--