This site supplied invalid Certificate Transparency information

ramanadan36 · September 30, 2018, 8:51am

https://grandappstudio.com

The SSL Cert is setup on both these domains using

sudo certbot --apache

but when Looking at the URL it should look green, but it is not

For GrandAppStudio.com it says:

This site supplied invalid Certificate Transparency information.

Can you help on this.

_az · September 30, 2018, 9:17am

On the off chance that this isn’t spam, you can fix your green padlock issue by addressing the mixed content problem on your site.

https://www.whynopadlock.com/

There’s nothing wrong with the certificate’s CT info.

tdelmas · September 30, 2018, 9:19am

You may have this error on an old chrome version. What version of chrome do you have?

(Another thread with the same problem: LetsEncrypt - Missing Certificate Transparent Logs? | DirectAdmin Forums )

JuergenAuer · September 30, 2018, 9:25am

Hi @ramanadan36

where do you see this error? Please share a screenshot. I can't find that. Letsencrypt supports Certificate Transparency Logs, Crt has the precertificate.

I can't find your certificate in the Google log.

https://transparencyreport.google.com/https/certificates?cert_search_auth=&cert_search_cert=&cert_search=include_expired:false;include_subdomains:false;domain:grandappstudio.com&lu=cert_search

Normally, a new certificate needs ~~15 minutes.

tdelmas · September 30, 2018, 10:00am

I think it's now there:

And there the CT information:

The important part is

This request complies with Chrome's Certificate Transparency policy.

JuergenAuer · September 30, 2018, 10:13am

Yep, now it is.

(20 character)

tdelmas · September 30, 2018, 11:13am

What domains? You only cited https://grandappstudio.com (And the certificate of that domain only contains one name)

ramanadan36 · September 30, 2018, 2:05pm

I am using Chrome Version 49.0.2623.112 (64-bit), is this the problem with Chrome ?

Osiris · September 30, 2018, 2:21pm

I'm pretty sure it is. That version is more than 2 and a half years old! It's probably very unsafe to use too.

tdelmas · September 30, 2018, 2:50pm

That version of Chrome was released the 2016-03-02.
Chrome certificate transparency require Two logs. Your certificate has been published on The icarus google log and on the sabre Comodo log.

The the sabre Comodo log has been inclused in Chrome after Mars 2017:
https://bugs.chromium.org/p/chromium/issues/detail?id=703700

So your version of Chrome doesn't know it. So the two log requirement isn't met.

You should update your browser. It's really dangerous to browse the web with an outdated browser.

I guess you are stuck on windows XP?

ramanadan36 · September 30, 2018, 4:39pm

Its only one domain. Thanks guys !

system · October 30, 2018, 4:39pm

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.