We've recently acquired a new
.Care domain and are attempting to install a SSL certificate. Whilst FF and IE are perfectly happy with the certificate - both display the padlock, Chrome is not and displays the following:
"The identity of this website has not been verified. The identity of the server you are connected to cannot be fully validated. You are connected to a server using a name only valid within your network, which an external certificate authority has no way to validate ownership of. As some certificate authorities will issue certificates for these names regardless, there is no way to ensure you are connected to the intended website and not an attacker."
The cert chains are valid, and after some digging, it appears the source of this is the way that Chrome interprets TLDs and any that it doesn't recognise, treats as non-unique.
Have we done something wrong in the way we have installed the cert? Is this a bug in Chrome? If so is there a workaround?