# Site not secure

**URL:** <https://community.letsencrypt.org/t/site-not-secure/163945>\
**Category:** Help\
**Created:** [October 25, 2021, 3:31pm UTC](https://community.letsencrypt.org/t/site-not-secure/163945 "2021-10-25T15:31:08Z")\
**Posts on this page:** 13\
**Page:** 1

<div class="post-metadata">

**Author:** ![asipicki](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/asipicki/32/66259_2.png) [@asipicki](https://community.letsencrypt.org/u/asipicki)\
**Post date:** [October 25, 2021, 3:31pm UTC](https://community.letsencrypt.org/t/site-not-secure/163945/1 "2021-10-25T15:31:08Z")

</div>

Hi, some customers are trying to access to my website and they see the common message saying the site is not secure. The certificate SSL is installed correctly and it didn't expire.

Searching in Google, I read it is related a root certificate that was renewed some weeks ago.

Someone could help me? What steps should I do on the server to don't show that error message to my customers? Or what steps should my customers do in their browsers to don't get this error message?

Thanks

---

<div class="post-metadata">

**Author:** ![jvanasco](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/jvanasco/32/55900_2.png) [@jvanasco](https://community.letsencrypt.org/u/jvanasco)\
**Post date:** [October 25, 2021, 3:49pm UTC](https://community.letsencrypt.org/t/site-not-secure/163945/2 "2021-10-25T15:49:49Z")

</div>

please share your domain.

---

<div class="post-metadata">

**Author:** ![asipicki](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/asipicki/32/66259_2.png) [@asipicki](https://community.letsencrypt.org/u/asipicki)\
**Post date:** [October 25, 2021, 4:09pm UTC](https://community.letsencrypt.org/t/site-not-secure/163945/3 "2021-10-25T16:09:03Z")

</div>

test.efacturacion.com.ar.  
I can't reproduce the issue. However, some customers can't access.

---

<div class="post-metadata">

**Author:** ![MikeMcQ](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/mikemcq/32/52772_2.png) [@MikeMcQ](https://community.letsencrypt.org/u/MikeMcQ)\
**Post date:** [October 25, 2021, 4:14pm UTC](https://community.letsencrypt.org/t/site-not-secure/163945/4 "2021-10-25T16:14:02Z")

</div>

@asipicki Your IIS server is sending the "short chain". You should review these two topics for an explanation of your options

> [@So.. It's impossible to support Android 7 and older on IIS? (In a non-hacky way?)](https://community.letsencrypt.org/t/so-its-impossible-to-support-android-7-and-older-on-iis-in-a-non-hacky-way/163912):
>
> W…

> [@Long (default) and Short (alternate) Certificate Chains Explained](https://community.letsencrypt.org/t/long-default-and-short-alternate-certificate-chains-explained/162526):
>
> I…

If you have other clients having problems that these do not explain please post more info about them - the kind of clients, their versions and so on.

---

<div class="post-metadata">

**Author:** ![sahsanu](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/sahsanu/32/89984_2.png) [@sahsanu](https://community.letsencrypt.org/u/sahsanu)\
**Post date:** [October 25, 2021, 4:52pm UTC](https://community.letsencrypt.org/t/site-not-secure/163945/5 "2021-10-25T16:52:16Z")

</div>

2 posts were split to a new topic: [Some customers are facing not secure message on their browsers](https://community.letsencrypt.org/t/some-customers-are-facing-not-secure-message-on-their-browsers/163953)

---

<div class="post-metadata">

**Author:** ![asipicki](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/asipicki/32/66259_2.png) [@asipicki](https://community.letsencrypt.org/u/asipicki)\
**Post date:** [October 25, 2021, 4:51pm UTC](https://community.letsencrypt.org/t/site-not-secure/163945/7 "2021-10-25T16:51:39Z")

</div>

Thanks for your reply.  
Is there a way to change the let's encrypt configuration for sending the long chain instead of the short chain?

---

<div class="post-metadata">

**Author:** ![MikeMcQ](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/mikemcq/32/52772_2.png) [@MikeMcQ](https://community.letsencrypt.org/u/MikeMcQ)\
**Post date:** [October 25, 2021, 5:02pm UTC](https://community.letsencrypt.org/t/site-not-secure/163945/8 "2021-10-25T17:02:00Z")

</div>

@asipicki Windows IIS will create its own chain so you need to work with that. If you were using a different server like Apache or nginx you can specify which chain to send easily. I do not know much about IIS so all I can offer is the link I already provided about IIS that has two IIS experts (@webprofusion and @rmbolger) helping someone else with a similar problem.

---

<div class="post-metadata">

**Author:** ![asipicki](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/asipicki/32/66259_2.png) [@asipicki](https://community.letsencrypt.org/u/asipicki)\
**Post date:** [October 25, 2021, 5:04pm UTC](https://community.letsencrypt.org/t/site-not-secure/163945/9 "2021-10-25T17:04:44Z")

</div>

Thanks Mike!

---

<div class="post-metadata">

**Author:** ![rmbolger](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/rmbolger/32/27474_2.png) [@rmbolger](https://community.letsencrypt.org/u/rmbolger)\
**Post date:** [October 25, 2021, 6:03pm UTC](https://community.letsencrypt.org/t/site-not-secure/163945/10 "2021-10-25T18:03:10Z")

</div>

Your site is properly serving the short "alternate" chain which should be valid for just about everything except old Android devices. So if the users who are having trouble are not using old Android devices, switching chains to the long "default" chain won't fix them.

Do you know what software/OS/browser/device the problem users are using?

---

<div class="post-metadata">

**Author:** ![asipicki](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/asipicki/32/66259_2.png) [@asipicki](https://community.letsencrypt.org/u/asipicki)\
**Post date:** [October 28, 2021, 2:40pm UTC](https://community.letsencrypt.org/t/site-not-secure/163945/11 "2021-10-28T14:40:40Z")

</div>

They are using Windows 7 Service Pack 1 with the latest Chrome version.

I can't ask him to upgrade the SO but I could ask him to use another browser. Do you know what browser could be compatible using that SO?

Thanks

 ![image](https://global.discourse-cdn.com/letsencrypt/original/3X/7/7/773dff4f70747d2fa3ef2aaaafbd521694a2f20a.jpeg)

---

<div class="post-metadata">

**Author:** ![Nummer378](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/nummer378/32/49862_2.png) [@Nummer378](https://community.letsencrypt.org/u/Nummer378)\
**Post date:** [October 28, 2021, 3:04pm UTC](https://community.letsencrypt.org/t/site-not-secure/163945/12 "2021-10-28T15:04:04Z")

</div>

> [@asipicki](#):
>
> Do you know what browser could be compatible using that SO?

Firefox will work out of the box.

However, Chrome should work just fine on Win 7. If Chrome has issues, this is an indication that the OS (Windows) has not loaded ISRG Root X1 for some reason. This should have been done automatically for Windows users.

For systems where this failed, it is possible to install ISRG Root X1 manually. Once that is done, Chrome should work again (with all Let's Encrypt certified sites).

> [@Fixing Windows installs that don't receive updates to their trusted roots](https://community.letsencrypt.org/t/fixing-windows-installs-that-dont-receive-updates-to-their-trusted-roots/161162/29):
>
> T…

---

<div class="post-metadata">

**Author:** ![asipicki](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/asipicki/32/66259_2.png) [@asipicki](https://community.letsencrypt.org/u/asipicki)\
**Post date:** [October 29, 2021, 11:11am UTC](https://community.letsencrypt.org/t/site-not-secure/163945/13 "2021-10-29T11:11:35Z")

</div>

Thanks! I will ask to the customer to try this!

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/letsencrypt/original/3X/c/a/ca6c06ea1ea201324bba7048c6841ce60236468d.png) [@system](https://community.letsencrypt.org/u/system)\
**Post date:** [November 28, 2021, 11:12am UTC](https://community.letsencrypt.org/t/site-not-secure/163945/14 "2021-11-28T11:12:20Z")

</div>

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.
