Err_cert_authority_invalid

Before renewal i don't get error from my website after renewal i got this problem "ERR_CERT_AUTHORITY_INVALID". How to solve this problem?
Thank you for your help.

My domain is: registrasi.rsmm.jatimprov.go.id

Subject: registrasi.rsmm.jatimprov.go.id

Issuer: Fortinet Untrusted CA

Expires on: Jan 29, 2022

Current date: Nov 1, 2021

PEM encoded chain:
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
MIID7DCCAtSgAwIBAgIEb8lAIDANBgkqhkiG9w0BAQsFADCBrjELMAkGA1UEBhMC
VVMxEzARBgNVBAgMCkNhbGlmb3JuaWExEjAQBgNVBAcMCVN1bm55dmFsZTERMA8G
A1UECgwIRm9ydGluZXQxHjAcBgNVBAsMFUNlcnRpZmljYXRlIEF1dGhvcml0eTEe
MBwGA1UEAwwVRm9ydGluZXQgVW50cnVzdGVkIENBMSMwIQYJKoZIhvcNAQkBFhRz
dXBwb3J0QGZvcnRpbmV0LmNvbTAeFw0xODExMzAxMzA3MDRaFw0yODExMzAxMzA3
MDRaMIGuMQswCQYDVQQGEwJVUzETMBEGA1UECAwKQ2FsaWZvcm5pYTESMBAGA1UE
BwwJU3Vubnl2YWxlMREwDwYDVQQKDAhGb3J0aW5ldDEeMBwGA1UECwwVQ2VydGlm
aWNhdGUgQXV0aG9yaXR5MR4wHAYDVQQDDBVGb3J0aW5ldCBVbnRydXN0ZWQgQ0Ex
IzAhBgkqhkiG9w0BCQEWFHN1cHBvcnRAZm9ydGluZXQuY29tMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0mgSrIRDMp05Tqq1Nkj9LV0eQdRmm3FvmvPF
NXqYnleeD/jecDYqlL9QBPGk4Mggv/kD+C+jPu/S5lkgfDdNmqq+gC1tCszuySuQ
GB4mbVNiTtjrJWo7/CNNGSS+gcSPrygJLdrCEoTDEhyc1ryzqm53W5hJdlGDzkp0
XsSjBV8zAxD//zgTlvWbIuS6StLkwT6r2Lcib//XqMI6yS6VXimr3ofYNo+76ESy
irY31PWo6ZGMpskWO1JkRGamNBPsXtWtaqTpPFr6i/2w/SUJoMX9qf9Dyhf5MVRT
mFtqCx7CmbKbpnRPXF69+10oL+Ba6KwSMHWncPJqzBBOredMvQIDAQABoxAwDjAM
BgNVHRMEBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQCR/YRr30cUc7CWgiEK04VZ
2LnRHwRJ9fVLiAoHhEb3RpzbWL6mkXM8qJ8OiNAhO4lM+KcKw71QXacV6m8z0tne
XdxX5VwaqSj5LyUrH1qq7SaxIeInu36k59iYE9XESrTsqN3IiTFf4wIVWr8JikNi
kZXpmEEx2Ejr8kzTudx1s5/KXr5GT/yWPsjGzg/o2vN1ZjuRXgTSDYSbSVCvZcOz
G428HS8EFnEozYoaWhcKB6UT6FJGkYsdGJzDt4AkzIoWnQ/mMF6juwx9mHFqgKW1
y8g/GSGIYlgrr5FbYWiTLk5zgIVdRSUC2QjBBegJ7eUbsZSymk5YW8IQAC5BQWu9
-----END CERTIFICATE-----

Certificate Transparency:

SCT Let's Encrypt 'Oak2022' log (Embedded in certificate, Invalid signature)

SCT Google 'Xenon2022' log (Embedded in certificate, Invalid signature)

Hi @aguswdd and welcome to the LE community forum :slight_smile:

You need to speak with whomever is responsible for your Fortinet firewall.

1 Like

Thank you, check to Fortinet

1 Like

See also: Fortinet Knowledge Base - View Document

1 Like

Thank you, problem solved after talk to fortinet

2 Likes

This seems more like they turned on SSL inspection, but they are doing it in both directions (instead of just outbound OR they need to read up on how to do it correctly for inbound connections).

2 Likes

@aguswdd, So what was the issue?

1 Like

Fortinet don't give explanation, but after i give log from Chrome, now problem solved.

Who manages the firewall?
[Who makes the changes?]

1 Like

Fortinet Vendor

1 Like

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.