Resolved err_cert_authority_invalid on mobile chrome

[Pascal_Netenvie]

Hi,
We have an e-commerce website running on a plesk Server (Debian 8.4‬ with Plesk version 12.5.30 Update #37) and using an SSL Certificate from Comodo.

Only on mobile chrome we get this error : net::err_cert_authority_invalid

I found this article but it don't seems to be usable on Plesk.
Any solution ?

Regards.

 

[UFHH01]

Hi Pascal_Netenvie,

unfortunately, you don't provide informations which can be investigated. We don't know, if you included all necessary parts of your certificate ( cert, key, CA-bundle ). We don't know, which Comodo certificate you use.
Consider to recheck your certificate, consider to reformat the server certificate.


Information for a "PositiveSSL" Comodo certificate:

The following *.crt should be included in this order as a "CA-bundle" :

Domain.crt
COMODORSADomainValidationSecureServerCA.crt
COMODORSAAddTrustCA.crt
AddTrustExternalCARoot.crt​

 

[Pascal_Netenvie]

Hi UFHH01,
This certificate is named "COMODO RSA Domain Validation Secure Server CA"
We have reconfigured the certificate including the CA CRT file that was forgotten but error still here.
2 files were given to us (was a migration) : domain.crt and COMODORSACertificationAuthority.crt. Nothing else.

Where/how can i check order of crt files in bundle on the server ?

 

[UFHH01]

Hi Pascal_Netenvie,

you can use "openssl" on your server to check from the command line:

openssl s_client -connect example.com:443 -servername example.com​

At "Certificate chain" you will see the order.


You can download possible missing certs at: https://support.comodo.com/index.php?/Default/Knowledgebase/Article/View/620/

 

[Pascal_Netenvie]

Thanks. I updated the CA Certificate with one downloaded from Comodo.
This is output of openssl command :

CONNECTED(00000003)
depth=0 OU = Domain Control Validated, OU = PositiveSSL, CN = www.domain.fr
verify error:num=20:unable to get local issuer certificate
verify return:1
depth=0 OU = Domain Control Validated, OU = PositiveSSL, CN = www.domain.fr
verify error:num=27:certificate not trusted
verify return:1
depth=0 OU = Domain Control Validated, OU = PositiveSSL, CN = www.domain.fr
verify error:num=21:unable to verify the first certificate
verify return:1
---
Certificate chain
0 s:/OU=Domain Control Validated/OU=PositiveSSL/CN=www.domain.fr
   i:/C=GB/ST=Greater Manchester/L=Salford/O=COMODO CA Limited/CN=COMODO RSA Domain Validation Secure Server CA
1 s:/C=GB/ST=Greater Manchester/L=Salford/O=COMODO CA Limited/CN=COMODO RSA Certification Authority
   i:/C=SE/O=AddTrust AB/OU=AddTrust External TTP Network/CN=AddTrust External CA Root

 

[Pascal_Netenvie]

Ok finally i returned to Comodo and downloaded another CA Certifcate and now it run ok.
Thanks for help.