Chrome show https invalid, but says that the certification is valid

enter image description here

enter image description here What is the problem with the certificate?

  • 4
    A side note: A payment provider with a let's encrypt certificate? That smells like phishing. – Gerald Schneider Feb 11 '19 at 7:05
  • 2
    Check the developer console (F12). Most probably some resource (image,js, css) is loaded via http. – Gerald Schneider Feb 11 '19 at 7:15
  • What do you see when you click on the "Not Secure" warning to the left of the URL? – Nick Feb 12 '19 at 11:32

The URL you are visiting is www.paykey.com. The certificate is issued to paykey.com. The certificate does not contain www.paykey.com in the Subject Alternative Name field.

Therefore, there is no match. Strict browsers will raise an error in this case.

  • Letsencrypt is an awesome, free & opensource ssl provider. But you have to pay for wildcard ssl (*.domain.com). Here, the certificate issued for www.paykey.com & you are browsing paykey.com with that certificate. Either need to get free letsencrypt cert for www.paykey.com + paykey.com or purchase *.paykey.com OR use www.paykey.com and redirect all requests from paykey.com to www.paykey.com – Anto Feb 11 '19 at 18:10
  • This is a wrong answer, this happens with both domains - see updated question – Elia Weiss Feb 12 '19 at 11:22
  • @EliaWeiss The certificate SAN field does not contain www.paykey.com, so strict browsers will still raise an error when visiting that domain. See the "Common Name Support Removed" section here: thesslstore.com/blog/security-changes-in-chrome-58 – Doug Deden Feb 12 '19 at 15:35

In my case it was a chrome extension

enter image description here

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.