We have a site that uses a signed cert from thwarte and we have an A rating for the cert across multiple checking tools.
However, we have a user that complained that her browser does not trust the cert.
I explained to my boss, that it is most likely that the user has a browser that
- does not have a full list of CA certs.
- OR her system & browser is not up to date.
- is compromised in some way.
Am I secure in saying this? I'm stressing because it is a big client, but I can say 100% that the cert is installed, valid and accepted under a large scope of tests.
I just need a sanity check, is there anything else I could be missing?