SSL / Cert question

[feickholt]

We've installed SLL Scanner on MWG 7.5

If we try to connect https://www.wikipedia.de we found

that ssl.server.certificatchain.ContinasExpiredCa is true....

I don't know why?

This is the chain:

www.wikipedia.de

	Subject	www.wikipedia.de
	Valid from 16/Jul/2015 to 16/Jul/2017
	Issuer	AlphaSSL CA - SHA256 - G2
	Subject	AlphaSSL CA - SHA256 - G2
	Valid from 20/Feb/2014 to 20/Feb/2024
	Issuer	GlobalSign Root CA
	Subject	GlobalSign Root CA
	Valid from 01/Sep/1998 to 28/Jan/2028
	Issuer	GlobalSign Root CA

All Certs are valid?

Did I miss something?

FRANK

[eelsasser]

That's odd. I don't see that behaviour on my 7.5.2.2.

[feickholt]

Strange we have several sites with the same behaviour: here with 1300ccm.de

[Former Member]

Hi Frank,

Are you still using the on-box CAs which are outdated?

I'd suggest getting onto the subscribed list.

This could happen if you have the onbox list first and the subscribed list second.

Best Regards,

Jon

[feickholt]

How do I configure this?

[feickholt]

I got it.. Thanks!