HTTPS warning: works on desktop, warning on mobile

Question

I installed a wildcard SSL certificate (*.vht.com) for my work and accessing the following website in chrome (or any desktop browser) https://tours.vht.com/fsviewer3/fss2.html works, but when trying to access using iOS or android(chrome) you will get warnings about the certificate not being valid (also getting warning about insecure content). Any ideas on why?
more info: I'm running IIS6 on that server.

beautiful house! is this phoenix? – Alex Gordon Dec 03 '14 at 17:57 — Alex Gordon, Dec 03 '14 at 17:57

score 11 · Answer 1 · answered Dec 03 '14 at 16:04

You're most likely missing the intermediate GoDaddy certificates on your server. Most desktop browsers cache these, but I don't think mobile ones do.

Check the GoDaddy Article on intermediate certificates with full instructions on acquiring and installing the ones from them.

Generally, certificates come as a "chain". The top Certificate Authority does not directly sign your server's certificate. Instead, there is a hierarchy of intermediate authorities that sign down the line until your server is signed.

When you receive a certificate back from an issuer, they should give you more than just the response to the certificate request file. Additionally, they should provide the intermediate certificates that also need to be installed.

:) I guess I could've clicked the valid link to see who issued it huh? — TheCleaner, Dec 03 '14 at 16:06
+1, you're correct. [See this check](https://www.ssllabs.com/ssltest/analyze.html?d=tours.vht.com) which tells us *Chain issues: Incomplete* - as well as other issues. — Yogu, Dec 03 '14 at 17:29

Mircea Vutcovici · Accepted Answer · 2014-12-04T04:10:32.303

You will need to add the intermediate certificate into the IIS SSL configuration. For details see: https://support.godaddy.com/help/article/4875/installing-an-ssl-certificate-in-microsoft-iis-5-6

You can test if the intermediate certificate is provided by IIS with: echo ""| openssl s_client -showcerts -connect tours.vht.com:443

The intermediate certificate you need to install in IIS is " Go Daddy Secure Certificate Authority - G2" listed bellow:

HTTPS warning: works on desktop, warning on mobile

2 Answers2