Advice Request Cert revoked errors with Chrome browsers.

[Zero Knowledge]

Hello.

I am experiencing Cert revoked errors with sites such as www.protonmail.com & www.soundcloud.com.

I use Chrome based browsers such as Google Chrome, Vivaldi & SlimJet.

I know the certs are good for both of those sites so why am I experiencing Cert revoked issues?

 

[Deleted member 2913]

You may try disabling HTTPS scan in your security software (if your security software has HTTPS/SSL scan).

 

[uncle bill]

check your certificate data with the one in the image below.

 

[Zero Knowledge]

I checked the SSL cert for protonmail.com and it's the same as the one above but it still says "Cert Revoked".

This problem is for Chrome only browsers. Unsure what is the problem is.

I don't have SSL scanning enabled with my AV. So that is out of the question.

And when I turn off SSL check off on Firefox protonmail.com loads but does not show login/register fields.

 

[uncle bill]

try the suggestions on the following page
"Common Login Problems - ProtonMail Support"

 

[Zero Knowledge]

I will take a look.

Still having problems with various sites on all Chrome browsers. Most of the Certs are from GlobalSign if that makes a difference.

 

[jamescv7]

Have you try to reinstall the Chrome browser or delete the profile data itself?

That suppose to refresh everything and check your system time which may cause certificate failed to initialize.

 

[Vipersd]

Sync your PC time, it often causes this type of problem with chromium based browsers.

 

[SHvFl]

Disable adguard ssl scanning and see if that solves the issue.

 

[Vipersd]

Adguard can cause this type of problem also.

 

[Zero Knowledge]

Don't have Adguard anymore. And the time is synced correctly.

Still experiencing SSL Cert errors with protonmail.com. Not sure why.

 

[Marko :)]

Try disabling your antivirus software and see if it works.

 

[uncle bill]

can you please post "nslookup www.protonmail.com" and "ping www.protonmail.com" output?

 

[Zero Knowledge]

Pinging protonmail.com [185.70.40.182] with 32 bytes of data:
Reply from 185.70.40.182: bytes=32 time=645ms TTL=57
Reply from 185.70.40.182: bytes=32 time=473ms TTL=57
Reply from 185.70.40.182: bytes=32 time=500ms TTL=57
Reply from 185.70.40.182: bytes=32 time=533ms TTL=57

Non-authoritative answer:
Name: protonmail.com
Address: 185.70.40.182

Does that help?

 

[uncle bill]

you should have pinged www.protonmail.com instead of protonmail.com. did you forgot the first two rows of nslookup (IN LINUX i see the address or name of the dns server answering the request)? can't check to see if there are these lines on windows right now.. please repeat commands and add output for tracert (or traceroute on linux systems) www.protonmail.com. you do this just to let me check if you resolve and route www.protonmail.com right.

 

[Zero Knowledge]

I've tried everything and www.protonmail.com still says cert revoked.

I've added the root certificate via snap in's, deleted the old cert and re-installed the new cert and still cert revoked error.

Not sure what the answer is

 

[Vipersd]

Is "Check for server certificate revocation" enabled in HTTPS/SSL part of Chrome settings? Also disable or enable the same option in Internet Explorer settings and then try again.

 

[Zero Knowledge]

Is "Check for server certificate revocation" enabled in HTTPS/SSL part of Chrome settings? Also disable or enable the same option in Internet Explorer settings and then try again.

I don't see the revocation setting in Chrome settings. That's strange it's usually there. Could something like a extension be blocking it?

And I can't change revocation setting on IE 11. Says settings are managed by group policy.

Ah huh! That's probably it. There is a setting in Group Policy which I have enabled but now forgotten.

Any idea on where the group policy settings are in Group policy? I image it's IE 11 settings.

 

[SHvFl]

I don't see the revocation setting in Chrome settings. That's strange it's usually there. Could something like a extension be blocking it?

And I can't change revocation setting on IE 11. Says settings are managed by group policy.

Ah huh! That's probably it. There is a setting in Group Policy which I have enabled but now forgotten.

Any idea on where the group policy settings are in Group policy? I image it's IE 11 settings.

Maybe here?
Manage Revocation Checking Policy

 

[Zero Knowledge]

Maybe here?
Manage Revocation Checking Policy

Tried that. Didn't work. Not sure what I changed. I lock down group policy very hard.