{"id":3039,"date":"2018-01-08T01:25:12","date_gmt":"2018-01-08T01:25:12","guid":{"rendered":"http:\/\/pariswells.com\/blog\/?p=3039"},"modified":"2018-01-08T01:25:12","modified_gmt":"2018-01-08T01:25:12","slug":"this-certificate-cannot-be-verified-up-to-a-trusted-certification-authority","status":"publish","type":"post","link":"https:\/\/pariswells.com\/blog\/random\/this-certificate-cannot-be-verified-up-to-a-trusted-certification-authority","title":{"rendered":"This certificate cannot be verified up to a trusted certification authority"},"content":{"rendered":"

Recently we had to renew the Root CA Certificate on a domain controller ( SBS ) due to it expiring. We then renewed our Webserver Certificates around this so they would have a longer renewal date.<\/p>

Some users in the morning on login when trying to open webpages where getting the error<\/p>

This\u00a0certificate cannot be verified up to a<\/em>\u00a0trusted certification authority<\/p>

The certificate should be downloaded every 8 hours to clients on the domains, but you can force this sync using<\/p>

certutil -pulse<\/strong><\/p>","protected":false},"excerpt":{"rendered":"

Recently we had to renew the Root CA Certificate on a domain controller ( SBS ) due to it expiring. We then renewed our Webserver Certificates around […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4],"tags":[2267,1500,851,2266,2124,2265,1514],"class_list":["post-3039","post","type-post","status-publish","format-standard","hentry","category-random","tag-dc","tag-renew","tag-renewal","tag-root-ca","tag-sbs","tag-this-certificate-cannot-be-verified-up-to-a-trusted-certification-authority","tag-webserver"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t