Shulou(Shulou.com)06/01 Report--

At present, there are more and more https websites, and when users visit some https sites, they often encounter browser prompts that "the security certificate of this site has expired or is not yet valid", and the green security lock of the browser's address bar does not appear, and the https link is marked with a diagonal red line. Is there any risk of https certificate when browsing the website next? This article will explain the reasons why the browser prompts the website https security certificate to expire and how to do it? Let's study together.

First, the reasons for the expiration of the website https security certificate

1. The current computer system time is not right. All http security certificates have issuance dates and deadlines. If the computer system time is outside the valid time range of the certificate, there is an opportunity for browsers to prompt the website that the https security certificate has expired or has not yet become effective.

2. The https security certificate of the website has indeed expired. According to the latest international standard for issuing https security certificate, https security certificate can not be issued for more than 39 months.

3. The site refers to other external chains that have deployed https security certificates. If the certificate of this external chain expires, it will also prompt the corresponding error. The terminal devices that can detect certificate errors in the outer chain are: mobile browser, PC IE6 (no prompt above IE6).

II. What if the ssl certificate expires?

When a user opens a website and prompts that the certificate has expired or is invalid, he should first check the validity period of the certificate. So how should it be done? A better way, you can use Firefox browser to query. Let's take west.cn as an example. After entering the corresponding address in the address bar, you can see a small green lock on the left, indicating that the site is protected by https. Click the small green lock, click the right arrow in the pop-up menu, select more information, and open the page information tab. In the security tab interface, you can see the authority of the certificate and the specific expiration time. Click the View Certificate button, open the certificate viewer, and get the serial number, validity time, fingerprint and other details of the SSL certificate. If you check and find that the security certificate has expired, you can renew it or repurchase the certificate immediately.

Third, the reasons for the risk of https certificate

1. If the certificate expires, please check whether the system time is correct immediately. The wrong system time will cause the certificate to expire or fail to validate, thus this prompt appears. In this case, please try to visit the website again after you try to modify the system time.

2. The website uses a certificate issued by a non-secure AC institution, and such problems generally appear on the company's internal website, router management page or some personal websites. Because the security certificate is expensive, the website often uses the certificate generated by itself, and the certificate issued by the non-security organization is not trusted, so this prompt appears.

3. Problems such as network reasons or data monitoring usually occur when you visit the encrypted search of google or other regular encrypted websites. Due to the national firewall or the network monitoring system of the company's intranet, the data traffic is hijacked and modified, resulting in certificate anomalies.

The above is the relevant introduction about the expiration of https security certificate and solves the problem of what to do about the expiration of security certificate. It also introduces the reasons for the risk of https certificate. I hope it can help you through the above introduction.

SSL certificate securely encrypts the website, which can effectively prevent hijacking, prevent your website from being maliciously implanted with advertisements, prevent tampering and monitoring from leaking users' passwords, and optimize the SEO ranking of search engines with SSL certificates.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.