Ubuntu – Why does Android Chrome say the site’s security certificate is not trusted

androidgoogle-chromehttpsssl-certificateUbuntu

My site is https://blendbee.com. It's using a PositiveSSL certificate that is valid.

In Windows 8 Chrome the certificate is fine (green lock in top left corner).

But…on my Android, it's not so fine. Screenshot: http://postimg.org/image/6vc64lr1d/

Any ideas why?

The server is running Ubuntu 13.10 at Digital Ocean.

Best Answer

You need to provide the entire certificate chain in order for it to show up as trusted.

Here's the link I got for comodo's instructions on installing the cert chain in apache: https://support.comodo.com/index.php?/Default/Knowledgebase/Article/View/637/37/certificate-installation-apache--mod_ssl

I got this from http://www.sslshopper.com/ssl-checker.html#hostname=blendbee.com, which flagged your cert as not being trusted in all browsers because of an incomplete chain.

Related Solutions

Ssl – Wildcard certificate causes warning on Google Chrome only

It sounds like you forgot to install the intermediate certificate bundle on your web server. Visit the certificate vendor's web site to download the intermediate bundle.

For nginx, this must be concatenated with your certificate and placed in the ssl_certificate directive, for instance:

# cat company.sv.crt ca_bundle.crt > company.sv.chained.crt

And in your nginx config:

ssl_certificate /etc/path/to/company.sv.chained.crt

Nginx – How to point CNAME to Digital Ocean droplet

The CNAME record type makes one name into an alias of another name.

Ie, the value of your CNAME record is not an IP address but a name with all-numeric labels.

You probably simply want to create an A record instead.

Best Answer

Related Solutions

Ssl – Wildcard certificate causes warning on Google Chrome only

Nginx – How to point CNAME to Digital Ocean droplet

Related Topic