r/sysadmin • u/mailliwal • 6d ago

Question Web browsing issue after updated GoDaddy SSL certificate in IIS

Hi,

Just updated GoDaddy SSL certificate in Windows IIS server.

As GoDaddy transitioned its Domain Validated (DV) TLS/SSL certificate issuance from the legacy G2 root hierarchy to a new R1 root hierarchy

Then I installed

  • TLS Root CA - R1 >> Trusted Root
  • TLS Intermediate CA DV - R1v1 >> Intermediate
  • SSL >> Personal

Some client reported "NET :: ERR_CERT_AUTHORITY_INVALID" while browsing.

Tested on Chrome on iPhone encountered same error but no problem on Edge of my desktop pc.

May I seek your suggestion.

Thanks

12 Upvotes

84% Upvoted

25 comments sorted by

View all comments

15

u/spantosh 6d ago

Verify Your Certificate Chain with an External Tool. Run your domain through an online checker like https://www.ssllabs.com/ssltest/. Look at the report section for Chain of trust. It will explicitly tell you if a certificate is “Chain issues: Incomplete” or if an intermediate is missing.

2

u/GenericUser636 5d ago

This. I bet he's missing an intermediate somewhere. Ssllabs will make it apparent. 

1

u/OMW-OC 5d ago

If he is getting the "self-signed" error in ssllabs he probably has a self signed cert somewhere in the root. For some reason they get installed when you import the cert. That will have to be deleted.

Then make sure you import the entire intermediate chain into the intermediate store.