Windows 10: Certificate issue. Windows does not have enough information to verify this certificate.

I have a website and users report getting this error periodically. I also get it. I happens with various browsers. Clicking "Cancel" works and it doesn't ask again for a while, but then it comes back. How to I stop it from happening?In the SSL Settings on the server, I have Client Certificates set to Ignore. I'm running Windows 2019 Server and IIS.

:)

 

Security certificate issue

Hi Doug,

To help you resolve your concern, please follow these steps:

• Open Microsoft Edge and access Nextdoor.com, click
  Continue to this website (not recommended). There should be a
  Certificate warning that will appear.
• Click the Certificate Error button to open the information window.
• Click View Certificates, and then click Install Certificate.
• On the warning message that appears, click Yes to install the certificate.

Please let us know the outcome

 

security certificate

Hi,

Thank you for posting your query on Microsoft Community.

I would like to know if this issue occur on Different Web browsers too?

I would suggest you to try the following steps, when you access secured website you may get this error message.

1. Open Internet Explorer and verify that the page you are trying to view is listing a certificate error.

2. To clear the certificate error goes to Tools --> Internet Options from the menu of IE 11.

3. Click on the advanced tab and scroll down to the security section. Clear the boxes for: "Check for publisher's certificate revocation" and "Check for server certificate revocation".

4. Click Apply and Ok.

5. Attempt to reload the page by clicking the Refresh button at the end of the address bar or by pressing the F5 key. Your page should now load as expected.

This error can be cause by the SSL certificate of the website – maybe it was not issued by a trusted Certification Authority on the client side. It could even be an attempt to fool you or intercept data you send to the server. Or maybe the certificate has
expired.

I suggest you to refer to the Microsoft help article and check if it helps.

"There is a problem with this website's security certificate" when you try to visit a secured website in Internet Explorer - Microsoft Support

I would suggest you to refer the link below and check if it helps:

Certificate errors: FAQ

Certificate errors: FAQ - Microsoft Support

Hope this information was helpful and do let us know if you need further assistance. We will be glad to assist.

 

Does Kerberos S4U with a certificate verify the certificate

We are attempting verify an Active Directory machine account, using Kerberos S4U with a Certificate.

The client sends the public part of a provisioned certificate to a remote server. The server then attempts to locate the machine account using Kerberos S4U with the public certificate.

All this works as expected.

However, in addition to performing the MS-RCMP to get the account, it was expected that the domain controller would also verify the basic certificate properties, such as expiration, and revocation. However, this seems not to be the case.

Can you confirm if this is the case, and if not, is there a recommendation as to how to verify the certificate?