Duff security cert - online.thinkbanking.co.uk

Nothing to do with Nethosted but I could do with a quick check.

My mate has an account on thinkbanking and wanted to check his account. However, when he tried to login on my machine, it came up with an invalid security cert in FF.

https://online.thinkbanking.co.uk/customer/login.aspx

IE on other hand thinks that the cert is valid.

Do other people see the same thing? I'm trying to work out if it a local issue (DNS spoofing or something nasty), a firefox issue or a thinkbanking issue.

Cheers, MdB

NetHosted Staff Joined: 22 Mar 2004 Posts: 7017

Hi,

Safari, Opera and FF 4b7 all say the certificate is valid and my connection to the site is encrypted. It's a VeriSign certificate valid until 04/12/11.

Andrew

Posted: Fri Jan 14, 2011 3:28 pm Post subject:

Thanks. That is what I'm getting from IE. Two different machines here are showing it as invalid in FF. I'm wondering if there is something nasty on our local network.... hmmm.

NetHosted Staff Joined: 22 Mar 2004 Posts: 7017

Hi,

What does the "More Information" page say when you click the lock/certificate warning? What certificate does it say is present?

Thanks,

Andrew

Posted: Fri Jan 14, 2011 3:39 pm Post subject:

online.thinkbanking.co.uk uses an invalid security certificate.

The certificate is not trusted because the issuer certificate is unknown.

(Error code: sec_error_unknown_issuer)

----

Certificate is not trusted because it hasn't been verified by a recognised authority

----

Could not verify this certificate for unknown reasons.

----

I can't copy paste all the details unfortunately but it does look like an issued by Verisign cert.

NetHosted Staff Joined: 22 Mar 2004 Posts: 7017

Hmm, there's no way a browser would not have heard of VeriSign being as they are one of the oldest certificate authorities in the world. Is this site also giving you issues? https://trust-center.verisign.co.uk/process/retail/console_login?application_locale=VRSN_GB

Andrew

Posted: Fri Jan 14, 2011 3:48 pm Post subject:

That site, LloydsTSB and Barclays (both Verisign) works fine.

Very strange.

NetHosted Staff Joined: 22 Mar 2004 Posts: 7017

I wonder who the certificate has been signed by?

Andrew

Posted: Fri Jan 14, 2011 3:49 pm Post subject:

If it was one machine then I would have though it was a problem there. As it is two - I'm wondering about something nasty on the network.... I've no idea what though.

Posted: Fri Jan 14, 2011 3:55 pm Post subject:

NetHosted Staff Joined: 22 Mar 2004 Posts: 7017

Most odd, as the details are all identical and my FF is happy:

Andrew

Posted: Fri Jan 14, 2011 4:06 pm Post subject:

Oh well. No more time to look into this at the moment. Thanks for helping out Andrew.

NetHosted Customer Joined: 22 Jul 2009 Posts: 10

On Firefox 3.6.13 i get

This Connection is Untrusted also.

Posted: Fri Jan 14, 2011 5:40 pm Post subject:

Ahhh - I'm on 3.6.13 also. That is probably the issue then.

NetHosted Customer Joined: 22 Jul 2009 Posts: 10

Just tried on FF 4b8 and get the same on there.

Client Support	Community	Server Status	Contact Us	Client Login
Email Hosting	Website Hosting	Reseller Hosting	VPS Hosting	Dedicated Servers