This site supplied invalid Certificate Transparency information


#1

https://grandappstudio.com

The SSL Cert is setup on both these domains using

sudo certbot --apache

but when Looking at the URL it should look green, but it is not

For GrandAppStudio.com it says:

This site supplied invalid Certificate Transparency information.

Can you help on this.


#2

On the off chance that this isn’t spam, you can fix your green padlock issue by addressing the mixed content problem on your site.

https://www.whynopadlock.com/

There’s nothing wrong with the certificate’s CT info.


#3

You may have this error on an old chrome version. What version of chrome do you have?

(Another thread with the same problem: http://forum.directadmin.com/showthread.php?t=56308 )


#4

Hi @ramanadan36

where do you see this error? Please share a screenshot. I can’t find that. Letsencrypt supports Certificate Transparency Logs, Crt has the precertificate.

https://crt.sh/?id=800374316

I can’t find your certificate in the Google log.

https://transparencyreport.google.com/https/certificates?cert_search_auth=&cert_search_cert=&cert_search=include_expired:false;include_subdomains:false;domain:grandappstudio.com&lu=cert_search

Normally, a new certificate needs ~~15 minutes.


#5

I think it’s now there:

And there the CT information:

The important part is

This request complies with Chrome’s Certificate Transparency policy.


#6

Yep, now it is.

(20 character)


#7

What domains? You only cited https://grandappstudio.com (And the certificate of that domain only contains one name)


#8

I am using Chrome Version 49.0.2623.112 (64-bit), is this the problem with Chrome ?


#9

I’m pretty sure it is. That version is more than 2 and a half years old! It’s probably very unsafe to use too.


#10

That version of Chrome was released the 2016-03-02.
Chrome certificate transparency require Two logs. Your certificate has been published on The icarus google log and on the sabre Comodo log.

The the sabre Comodo log has been inclused in Chrome after Mars 2017:
https://bugs.chromium.org/p/chromium/issues/detail?id=703700

So your version of Chrome doesn’t know it. So the two log requirement isn’t met.

You should update your browser. It’s really dangerous to browse the web with an outdated browser.

I guess you are stuck on windows XP?


#11

Its only one domain. Thanks guys !


#12

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.