The website’s security certificate is not secure. Error Code 0

This forum is a secure site (https://answers.microsoft.com/). Do you get that error here too? Are you using your ISP DNS servers? You could try switching temporarily to the Google public DNS servers: 8.8.8.8 and 8.8.4.4 instead of whatever you get automatically from your own router or from your ISP.

I always keep one of the Google servers as my secondary DNS, as very rarely my ISP's DNS, or those it depends on, have had issues and I retain full Internet access that way, after it fails over to the Google DNS.

I tried the DNS servers and several other fixes but nothing seems to work.  Is there a registry edit that might need to be deleted or the value changed.  I did run Malwarebytes and didn't fix the issue.  I have never seen this before that a lot of secure sites do not work.  Please help I don't want to reimage only to have the same issue.

Paul

This issue may have occurred due to several reasons. For us to isolate the issue, kindly answer the following questions:

• Which browser are you using?
• Can you provide us some websites that has this issue?
• Are you getting a certificate warning on the browser whenever you try to visit a certain website?

Get back to us for further assistance.

Hi, 

I have a client whose SAP systems I need to connect to via a browser for some applications. Until last Friday, I always got the message that there was a problem with the site's security certificate, but had the option to continue to the site (even though it was not recommended). Since yesterday, when connecting to the same sites, I can no longer get past the warning but instead get the error reported by Don Cuthbert above. 

Unfortunately I cannot provide you with the URLs I am using as they are corporate servers and only accessible via VPN. What I can tell you is that the issue occurs whether I use Edge, Chrome or IE 11. 

There are 4 different sites (all in the same domain) which I try to access. Moreover, there are some inconsistencies. Yesterday, I was unable to access any of the four sites. Today, with one of the sites I initially got a different error:

After that, I was able to continue on to the webpage without a problem. However, as I am writing this reply, I tried again to access this same site and now get the initial error again:

The other sites remain inaccessible. This is incredibly frustrating as I need to access these sites in order to support the client. Coming on top of the change that prevents One Drive from using SD cards for storage and has thus rendered OneDrive useless on my notebook, my confidence in Microsoft and Win 10 is taking a serious battering this week :(...

I have seen these errors from time to time. Usually, closing the browser entirely (not just that Tab) improves things. If the option to go on anyway is presented and I trust that the site is either in need of an update, or that it is a temporary browser glitch, I sometimes just continue on, as worked for you once.

Is there any chance that the site certificates are actually wrong or expired, since other https sites work properly?

Could the issue be due to the VPN? If you could connect from your same computer while physically connected to their Intranet, it might help to troubleshoot, but their corporate security may not allow that (or logistically impractical).

Is it likely that yours is the only device with Windows 10 connecting via VPN as you are? Are there any other reports of problems?

Since all tried browsers are consistently affected, I wonder about antivirus software bring common to them all. The easiest way to a generic test might be to boot with something like a Ubuntu Live media. It would allow you to use the included browsers without Windows or any installed software interfering (if you can figure out how to setup the VPN).

Another approach is to clean install Windows to a small partition and try connecting. This eliminates any inherited issues in your current install that might be involved. Running from a Virtual Machine, such as in Hyper-V, might be a similar test. I find a clean install can be done quite quickly, so it may be worth trying in a partition or VM.

Hi Don,

thanks for the reply and suggestions. I am actually quite certain that the certificates are not up to date. I have been working for this client for over 18 months and in all browsers and connection modes on all machines, I always get the initial warning. And always I choose to continue to the site. What changed this week was the message above whereby the option to continue no longer appears. 

I don't think it is a simple case of not closing the browser. In all my attempts to connect I closed and restarted the browser(s) before re-trying, although it is possible I had eg a Chrome window open and minimized while restarting Edge, for example. As they share some settings and resources, perhaps this was a factor. 

I don't have the option to connect without the VPN as intranet connections are only available to internals with SSO. That said, when I am out of the office I use a Cisco AnywhereConnect VPN client but inside the office when connected to the wifi network, it is not necessary to run the VPN. So I can confirm that the issue is not VPN related as it occurs whether the VPN is active or not. Unfortunately, most of my colleagues (who are internal employees of the implementation partner) are still running Win 7, so I have noone to compare with. 

What I did just try was to connect from this laptop (which is not the laptop I use at work). On here I got the warning about the hostname in the certificate being different from that of the site, but with the option to continue. So on this machine I do not have an issue. Apart from the hardware itself (this is a Lenovo ideapad and the other is a Samsung Ativ Book 9+), the main difference is that this machine has W10 Home 64 bit versus W10 Pro 64 bit on the other machine. But the fact that the Samsung worked flawlessly until Monday makes me doubt it is machine specific, as there were no other software changes over the weekend except for Windows updates. 

I can't run a separate instance of W10 on the Samsung due to another new issue that appeared over the weekend, whereby my OneDrive (which was installed to a 256GB SD card) came up with an error saying it no longer works with drives that are not formatted as NTFS. As I use OneDrive to sync files between multiple PCs, I had to move it to the SSD on the laptop, which is now dangerously full. 

Anyway, for the moment I have the workaround (which is to access the affected systems after hours from a different machine). It's not ideal, but hopefully the issue is resolved in future updates...

Thanks again for your input!

Luke

For OneDrive and SD, can you format the SD as NTFS? I assume that it is using exFAT now, since it is over 32GB.

I would have to wonder how much problem it would be for them to update their site security certificates, as having users make a habit of ignoring security warnings cannot be in the best interests of the corporation, especially with the recent ransomware attacks becoming an international issue.

Hi Don,

I am waiting to see if anything changes in the next couple of weeks re the SD card. It seems like a very backwards step to force people to format using NTFS. I can understand them phasing out FAT32 and eventually exFAT, but why replace it with a system that is almost as old, especially when they have newer, more reliable formats like REFS. It's also the way it was done: without warning and without any support documentation, such as how to convert the FS. As the conversion is one way, I will wait before I do it. 

For the certificates, I agree it is madness that they do not fix the problem at its source. I have put in a support ticket requesting that, but I am a tiny, external cog in a huge machine and so unlikely to generate much traction for change. 

Guess I will just put this down as a bad week ;)...

Thanks for the support and suggestions...

Luke

Hi Steven,

This issue is often caused by browser security settings. For us to have it resolved, we suggest that you follow these methods:

Method 1: Configure the browser security settings.

1. Launch Mozilla Firefox.
2. On the address bar, type about:config. and press Enter.
3. Click on I accept the risk!.
4. Click the seacrh bar, and then type security.ssl.enable_ocsp_stapling.
5. Double-click security.ssl.enable_ocsp_stapling, to turn the value to FALSE.

Note: The above troubleshooting method is for Mozilla Firefox only.

Method 2: Make sure that the system time is accurate.

Let us know if the steps above helped you to resolve this issue.