# Windows 7 ssl problem

**URL:** <https://community.letsencrypt.org/t/windows-7-ssl-problem/161824>\
**Category:** Help\
**Created:** [October 3, 2021, 7:47pm UTC](https://community.letsencrypt.org/t/windows-7-ssl-problem/161824 "2021-10-03T19:47:23Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![liko](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/liko/32/54058_2.png) [@liko](https://community.letsencrypt.org/u/liko)\
**Post date:** [October 3, 2021, 7:47pm UTC](https://community.letsencrypt.org/t/windows-7-ssl-problem/161824/1 "2021-10-03T19:47:23Z")

</div>

![image](https://global.discourse-cdn.com/letsencrypt/original/3X/3/6/361f4fe9e00b0caaf8c23f710757806be61fe57e.jpeg)  
Problem open ssl sites in windows 7  
Is say don’t have private

Pls solve this ASAP

---

<div class="post-metadata">

**Author:** ![ski192man](https://avatars.discourse-cdn.com/v4/letter/s/3da27b/32.png) [@ski192man](https://community.letsencrypt.org/u/ski192man)\
**Post date:** [October 3, 2021, 9:16pm UTC](https://community.letsencrypt.org/t/windows-7-ssl-problem/161824/2 "2021-10-03T21:16:15Z")

</div>

I'm not sure what browser this is, but it looks vaguely like chrome. See this

> [@Fixing Windows installs that don't receive updates to their trusted roots](https://community.letsencrypt.org/t/fixing-windows-installs-that-dont-receive-updates-to-their-trusted-roots/161162/7):
>
> F…

---

<div class="post-metadata">

**Author:** ![liko](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/liko/32/54058_2.png) [@liko](https://community.letsencrypt.org/u/liko)\
**Post date:** [October 3, 2021, 9:41pm UTC](https://community.letsencrypt.org/t/windows-7-ssl-problem/161824/3 "2021-10-03T21:41:06Z")

</div>

Hello  
Yes is in chrome on windows7  
Have problem a lot of sites

In Firefox + chrome in windows 10 is ok .

Need know how to solve this  
If not I’m need change ssl certification to other company .  
Do you know how to solve this ?

---

<div class="post-metadata">

**Author:** ![liko](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/liko/32/54058_2.png) [@liko](https://community.letsencrypt.org/u/liko)\
**Post date:** [October 3, 2021, 9:52pm UTC](https://community.letsencrypt.org/t/windows-7-ssl-problem/161824/4 "2021-10-03T21:52:07Z")

</div>

If can please write step by step how can fix this for many peoples don’t professional  
Thanks

---

<div class="post-metadata">

**Author:** ![Ted](https://avatars.discourse-cdn.com/v4/letter/t/db5fbb/32.png) [@Ted](https://community.letsencrypt.org/u/Ted)\
**Post date:** [October 3, 2021, 10:55pm UTC](https://community.letsencrypt.org/t/windows-7-ssl-problem/161824/5 "2021-10-03T22:55:22Z")

</div>

Read this:

> **[DST Root CA X3 Certificate Expiration Problems and Fix](https://www.stephenwagner.com/2021/09/30/sophos-dst-root-ca-x3-expiration-problems-fix/)**
>
> Today, the DST Root CA X3 certificate expired, leaving many devices on the internet having issues connecting to services and certificates that use this Root CA, including those using Let’s Encrypt certificates. Some of these problematic devices...

Download the root certs mentioned in the post

Run mmc

install the certificate addin in mmc, choose local machine

install the 2 root certs in trusted root cert authorities

Note that this is done in the windows 7 client. If you are the admin of the webserver that is affected then post the URL of the website and we can take a look at it.

---

<div class="post-metadata">

**Author:** ![Archibald](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/archibald/32/61901_2.png) [@Archibald](https://community.letsencrypt.org/u/Archibald)\
**Post date:** [October 4, 2021, 3:21am UTC](https://community.letsencrypt.org/t/windows-7-ssl-problem/161824/6 "2021-10-04T03:21:06Z")

</div>

I thought Windows 7 is End of Life and no longer officially by Microsoft, and thereby most of the rest of the communities as well. ❓

---

<div class="post-metadata">

**Author:** ![webprofusion](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/webprofusion/32/85310_2.png) [@webprofusion](https://community.letsencrypt.org/u/webprofusion)\
**Post date:** [October 4, 2021, 4:44am UTC](https://community.letsencrypt.org/t/windows-7-ssl-problem/161824/7 "2021-10-04T04:44:42Z")

</div>

Here is my general guidance for Windows 7 from [Let's Encrypt DST Root CA X3 expiry Sept 30th 2021 | Certify The Web Docs](https://docs.certifytheweb.com/docs/kb/kb-202109-letsencrypt#windows-pcs)

> For Windows 7 (without outdated trust store) you should urgently replace the machine operating system with Windows 10 or higher. If this is not possible, manually install by browsing to [http://x1.i.lencr.org/](http://x1.i.lencr.org/) in order to download the .cer file for ISRG Root X1, open file, click "Install Certificate..", Choose default option "automatically select..", Next, Finish. The ISRG Root X1 certificate will now be visible using certmgr.msc under Trusted Root Certification Authorities. Reboot machine.

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/letsencrypt/original/3X/c/a/ca6c06ea1ea201324bba7048c6841ce60236468d.png) [@system](https://community.letsencrypt.org/u/system)\
**Post date:** [November 3, 2021, 4:45am UTC](https://community.letsencrypt.org/t/windows-7-ssl-problem/161824/8 "2021-11-03T04:45:37Z")

</div>

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.
