This certificate cannot be verified up to a trusted certification authority

HCL Domino Domino Forum
1

What does the following message mean exactly:

“This certificate cannot be verified up to a trusted certification authority.”

I receive this when I try to access my Certificate Authority database via the browser using https. Since I’m inside my firewall and on my internal network, I’d think that the link to the CA server would work, but it it my thought that it does not. (I’d suspect this would happen for external users trying to verify my certificate via my domino CA.)

Can anyone shed an light on this? Should I try to create a new certificate?

Thanks, Jerry

2

Subject: This certificate cannot be verified up to a trusted certification authority

Unless you started with a certificate issues from Verisign, Thawte or one of the other vendors that already have trusted public keys embedded in your browser, this message is perfectly normal. This typically is caused by setting up a CA yourself and self-certifying your own root certificate. The browser is simply telling you you are using a certificate that it doesn’t have a trusted public key already on file for. Verisign, Thawte and others have their root public keys already embedded in the browser. To see them in Internet Explorer to go Tools → Internet Options → Content → Certificates and click on the Trusted Root Certificates tab. Firefox and other browsers have them too, just in different places.

You can easily accept the root of your CA into your browser and never be bothered by that message again - if you search the forum, it’s been discussed many times and several folks including myself have posted step by step instructions (but that was a while ago and may be in the R5 forum for me - same procedure tho).

3

Subject: This certificate cannot be verified up to a trusted certification authority

Is the Certificate Authority database the only database this happens with?

4

Subject: RE: This certificate cannot be verified up to a trusted certification authority

Thanks for the clarification Eric - I thought that might be the case.

“Is the Certificate Authority database the only database this happens with?”

Yes

Thanks, Jerry