When I request my website from Google Chrome, I receive a CERT_INVALID error, but when I test it using Qualys SSL test, it passes all tests and receives a A+. In addition to this, SSL seems to be working with every other browser.

The SSL Cert being used is a domain validated certificate from PositiveSSL.

The order in which I packaged the CA certs is:

  1. domain_cert.pem
  2. COMODORSADomainValidationSecureServerCA.pem
  3. COMODORSAAddTrustCA.pem
  4. AddTrustExternalCARoot.pem

So that the command used to package is the following:

cat domain_cert.pem COMODORSADomainValidationSecureServerCA.pem COMODORSAAddTrustCA.pem AddTrustExternalCARoot.pem > ssl-bundle.crt

Which should be correct, but I get a browser error as in the below image:

enter image description here


Are you sure it's not just you? I don't get a cert error in Chrome when I access your [empty?] site.

enter image description here

| improve this answer | |
  • That's really strange. I get this: i.imgur.com/rvoB1a2.png Do you have any suggestions? – Carey Feb 4 '15 at 11:00
  • @Saikyr Like Ad7six said in his comment on your question, it's probably some locally cached something. Try from a different computer and see what you see. – HopelessN00b Feb 4 '15 at 11:04
  • Definitely works my phone - I'll have to try clear my chrome cache then. Really weird though, the displayed cert in the error matches the one I set in nginx so I don't see where cache comes in. – Carey Feb 4 '15 at 11:07
  • 1
    @Saikyr Chrome version? You're in "it's just my browser" territory atm. – AD7six Feb 4 '15 at 11:17
  • Oops, I'm sorry. On version 40, OSX. Added COMODO certs to keychain, doesn't seem to be helping. Doesn't seem to be a clear ssl cache option either, posts using the change proxy method don't account for OSX; it just opens network preferences which doesn't have anything related to SSL or certs. – Carey Feb 4 '15 at 11:24

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.