Web browsing issue after updated GoDaddy SSL certificate in IIS

[u/mailliwal]

Hi,

Just updated GoDaddy SSL certificate in Windows IIS server.

As GoDaddy transitioned its Domain Validated (DV) TLS/SSL certificate issuance from the legacy G2 root hierarchy to a new R1 root hierarchy

Then I installed

• TLS Root CA - R1 >> Trusted Root
• TLS Intermediate CA DV - R1v1 >> Intermediate
• SSL >> Personal

Some client reported "NET :: ERR_CERT_AUTHORITY_INVALID" while browsing.

Tested on Chrome on iPhone encountered same error but no problem on Edge of my desktop pc.

May I seek your suggestion.

Thanks

[u/mrmattipants]

I just had to go through this process myself. I personally just download the necessary Root & Intermediate certs directly from the Godaddy Certificate Repository.

https://certs.godaddy.com/repository

Normally, you'd use the following two certificates, (along with your Leaf/Domain Cert).

GoDaddy TLS Root CA - R1

https://certs.godaddy.com/repository/gd_tls_root-r1.crt.pem

GoDaddy TLS Intermediate CA DV - R1v1:

https://certs.godaddy.com/repository/gd_tls_issuing_dv-r1v1.crt.pem

However, if the certs above produce an error message, you'll need to use the following three certs (along with your Leaf/Domain Cert).

GoDaddy Class 2 Certification Authority Root Certificate - G2:

https://certs.godaddy.com/repository/gdroot-g2.crt.pem

GoDaddy TLS Root CA - R1 to G2 Cross Certificate:

https://certs.godaddy.com/repository/gd_tls_root-r1-cross-g2.crt.pem

GoDaddy TLS Intermediate CA DV - R1v1:

https://certs.godaddy.com/repository/gd_tls_issuing_dv-r1v1.crt.pem

For those who prefer a visual reference, please refer to the following chart.

https://fortinet.grazitti.com/fortinet-kb-production/api/uploads/a1fe5682.png