I recently ran into this issue of the Sectigo Root certs expiring on May 30th of this year: https://gist.github.com/minaguib/c8db186af450bceaaa7c452ba6a9901b
I updated the certificate chain on our servers and the change was seamless for all employees and users except ONE USER.
The single user experiencing problems is loading an invalid chain for our website. There is screenshots below.
- The server has been updated and confirmed the certificate & chain is good to go (screenshot attached).
- I have one single client that is still loading an invalid cert chain.
- The server terminating TLS is an Amazon ALB instance.
- The server certificate chain has been validated using an online service for sanity. There is a screenshot below showing this.
Deleted any "expired" or "invalid" entries in the Mac Keychain.
Searched the Mac Keychain for any reference to "AddTrust"
Fully cleared all browser cache. Chrome is up to date Version 83.0.4103.97 (however Safari also fails, so it's not the browser I don't think)