Does anyone have an example of a site protected with a new Let’s Encrypt certificate that works with Chrome + Windows XP SP3? We’ve issued a new certificate for act.democracyforamerica.com and now receive NET::ERR_CERT_AUTHORITY_INVALID in Chrome. The detailed error is “This certificate cannot be …

[image] [Help needed] Windows XP support Does anyone have an example of a site protected with a new Let's Encrypt certificate that works with Chrome + Windows XP SP3? Here's one: https://www.brownlawoffice.us/ , just tested to work without errors on both Chrome and IE8. Your problem is almost …

If you look at https://www.ssllabs.com/ssltest/analyze.html?d=act.democracyforamerica.com under the Handshake Simulation section, you’ll see “Windows XP” is listed as “Server closed connection.” I believe that usually means the server didn’t like any of the cipher suites offered by the client, but a…

Might be the following issue: [image] TLS connection to letsencrypt.org fails with Chromium and IE F…

Hi Jsha: That’s a red herring – it’s testing IE6+XP, which doesn’t have TLS support, so the connection fails. IE8+XP is what we’re interested in, which does make a connection.

Hi PFG: Interesting, let me check that.

@danb35 , I get the same errors at https://www.brownlawoffice.us/ and my certificate path is identical to yours, so it’s definitely not related to intermediate certificates. @pfg , “Update root certificates” is checked in my test vm, but that sure does sound like a likely candidate. I’m going to cho…

My two sites works perfect on windows XP with IE and Chrome But on SSL Labs I see errors with windows xp :stuck_out_tongue: https://kretyny.pl/ and https://bookeriada.pl/ https://www.ssllabs.com/ssltest/analyze.html?d=kretyny.pl

[image] patrickmkane: I get the same errors at https://www.brownlawoffice.us/ and my certificate path is identical to yours, so it's definitely not related to intermediate certificates. I'm wondering, then, if it's something with your Windows installation. I have WinXP in a VM and tested it …

CERT_AUTHORITY_INVALID in XP SP3

Server

pfg April 7, 2016, 4:21pm 4

Might be the following issue:

Topic		Replies	Views
Let's Encrypt certificates do not work on XP in IE8 or Chrome	12	23104	December 2, 2015
Upcoming intermediate changes Documentation	3	27658	March 25, 2016
Not trusted in Chrome on Windows XP	3	4745	December 9, 2015
[Help needed] Windows XP support	119	38047	April 7, 2016
'Certificate Path' vs 'Issued by' Server	5	2586	June 24, 2016

CERT_AUTHORITY_INVALID in XP SP3

Related topics