Windows 10: Wrong SSL cert showing up in browsers

Hi,


I have been trying to figure this one out for some time and it's really annoying.


When opening a new page in Chrome or Mozilla I get a *.xxx.windows.com certificate xxx being different subdomains presented instead of the certificate that should actually be issued to the site. Either Windows 10 is somehow proxying requests for https pages through what I am guessing is Windows Defender or there is some kind of shared cache that is storing these certs incorrectly, because I have had a few situations happen where I am browsing let's say amazon, then I open a new tab to an https site and the same amazon cert is presented for some reason and I get the same CN mismatch error presented here. 99% of the time it's the *.xxx.windows.com that is presented though.


Does anyone have any idea about what is happening here?







:)

 

Problem with SSL certs

When I access
this page from my HTC HD7 T9292 (Windows Phone 7.5), I get the 'standard' scary SSL cert warning screen.



Red X

We're having trouble with this site's security certificate.

It looks like the security certificate wasn't issued by a trusted certificate authority. This can indicate ... yada yada yada



The CA is AddTrust External CA Root, listed at
http://msdn.microsoft.com/en-us/library/windowsphone/develop/gg521150(v=vs.105).aspx .



Any ideas as to why it isn't working?

 

Fraudulent SSL cert minted for Firefox addons site

Oh yeah, I'll bet it's "fun" alright. The whole SSL system is broken, with multiple single points of failure ie the cert companies.

There was an excellent in depth article on this a while back on The Register. I don't have the link handy, unfortunately.

 

E71 SSL Cert Issue

The Situation:

I'm using several E71's in my company. They have all been set up to use Nokia "mail for exchange" using the built in version of mail for exchange that came with the phone.

I'm using mail for exchange to synchronise with a Microsof Windows Small Business Server 2003.

I'm using a self signed ssl certificate created by the Small Business Server. I manually copy this to the device using the Nokia PC Suite.



The Issue:

the E71's continually prompt with this:

"Website has sent a certificate with different website name than requested. Accept anyway?"

Selecting "Accept this time only" is the only option that works. However, the devices prompt over and over again.

Choosing the option "Accept permanently" does not work.



When i look at the details of the SSL Cert on the E71 it appears as:

Site: remote.publicdomainname.ieIssuer: sbsserver.sbssdomain.localSubject: sbsserver.sbssdomain.local



I know this may appear to be a Small Business Server issue but its not as the SSL cert works on a Windows mobile device.



Anyone come across this issue?



Thanks for the support in advance.