Jump to content
Jeff-22

Chrome self signed certificate, Cannot guarantee... ... [merged]

Recommended Posts

Some official Kaspersky recognition would do worlds in helping their customers and resellers to continue supporting the products.

Share this post


Link to post
KTS 19.0.0.1088(d), Google Chrome v72.0.3626.81(Official Build)(64-bit), W10x64, 1809(17763.1340)
  • Same issue as bigjeff22 & 8+ Kaspersky Customers who've posted.(image 1)
  • chrome://settings/ [Manage certificates] certificate issued to {Google Internet Authority G2] issued by [GeoTrust Global CA] expired 01/01/2019 (image 2)
  • KTS19 Web Anti-Virus detection (KTS19[WA] scan [GC invalid Cert] detection].txt
  • Accept [Do not scan encrypted connections]is a 'test' Kaspersky Customers are/will be requested to "try", do not accept [Do not scan encrypted connections]is a solution.

Unsure what Kasperskys benchmark is for "acknowledging" an issue impacting Kaspersky Customers.  

[KTS19][GC][SSL conx with invalid cerificate].jpg

[GC]Cert]exp'd[010119] issued 2 [GIAG2] issued by [GTG CA].jpg

[KTS19[WA] scan [GC invalid Cert] detection].txt

Edited by K-SNAFU
added/corrected txt.

Share this post


Link to post

Note the two certificates for which I experience a problem are 01/29/19-02/02/19.  They were valid during the fault.  They did not have a name aside what was previously given (a hexadecimal address).

Share this post


Link to post
5 hours ago, rudger79 said:

Official Kaspersky recognition can be found here: https://my.kaspersky.com/

 

Hi rudger79, are you "suggesting" all affected Kaspersky Customers go to the portal & log an incident record or perhaps there's further "invisible" url information that you will kindly share?

Share this post


Link to post

03.02.2019 23.23.47    SSL connection with invalid certificate detected    footprintc.azureedge.net    Certificate issued for: footprintc.azureedge.net    Certificate error: This certificate or the certificate chain is built on an untrusted root center.    Application: Google Chrome    Time: 2/3/2019 11:23 PM
03.02.2019 23.23.46    SSL connection with invalid certificate detected    fpc.msedge.net    Certificate issued for: fpc.msedge.net    Certificate error: This certificate or the certificate chain is built on an untrusted root center.    Application: Google Chrome    Time: 2/3/2019 11:23 PM
03.02.2019 23.23.45    SSL connection with invalid certificate detected    s-ring.msedge.net    Certificate issued for: s-ring.msedge.net    Certificate error: This certificate or the certificate chain is built on an untrusted root center.    Application: Google Chrome    Time: 2/3/2019 11:23 PM
03.02.2019 23.23.44    SSL connection with invalid certificate detected    a-ring.msedge.net    Certificate issued for: a-ring.msedge.net    Certificate error: This certificate or the certificate chain is built on an untrusted root center.    Application: Google Chrome    Time: 2/3/2019 11:23 PM
03.02.2019 23.22.30    SSL connection with invalid certificate detected    static2.sharepointonline.com    Certificate issued for: static2.sharepointonline.com    Certificate error: This certificate or the certificate chain is built on an untrusted root center.    Application: Google Chrome    Time: 2/3/2019 11:22 PM
03.02.2019 23.22.28    SSL connection with invalid certificate detected    r1.res.office365.com    Certificate issued for: r1.res.office365.com    Certificate error: This certificate or the certificate chain is built on an untrusted root center.    Application: Google Chrome    Time: 2/3/2019 11:22 PM
03.02.2019 23.20.05    SSL connection with invalid certificate detected    r4.res.office365.com    Certificate issued for: r4.res.office365.com    Certificate error: This certificate or the certificate chain is built on an untrusted root center.    Application: Google Chrome    Time: 2/3/2019 11:20 PM
03.02.2019 23.18.55    SSL connection with invalid certificate detected    a.config.skype.com    Certificate issued for: a.config.skype.com    Certificate error: This certificate or the certificate chain is built on an untrusted root center.    Application: Google Chrome    Time: 2/3/2019 11:18 PM
03.02.2019 23.18.54    SSL connection with invalid certificate detected    b.config.skype.com    Certificate issued for: b.config.skype.com    Certificate error: This certificate or the certificate chain is built on an untrusted root center.    Application: Google Chrome    Time: 2/3/2019 11:18 PM
03.02.2019 23.18.42    SSL connection with invalid certificate detected    onerm.olsvc.com    Certificate issued for: onerm.olsvc.com    Certificate error: This certificate or the certificate chain is built on an untrusted root center.    Application: Google Chrome    Time: 2/3/2019 11:18 PM
03.02.2019 23.16.50    SSL connection with invalid certificate detected    easylist-downloads.adblockplus.org    Certificate issued for: easylist-downloads.adblockplus.org    Certificate error: This certificate or the certificate chain is built on an untrusted root center.    Application: Google Chrome    Time: 2/3/2019 11:16 PM
03.02.2019 23.16.43    SSL connection with invalid certificate detected    australia.smartscreen-prod.microsoft.com    Certificate issued for: australia.smartscreen-prod.microsoft.com    Certificate error: This certificate or the certificate chain is built on an untrusted root center.    Application: Windows Defender SmartScreen    Time: 2/3/2019 11:16 PM
03.02.2019 23.15.36    SSL connection with invalid certificate detected    clientservices.googleapis.com    Certificate issued for: clientservices.googleapis.com    Certificate error: This certificate or the certificate chain is built on an untrusted root center.    Application: Google Chrome    Time: 2/3/2019 11:15 PM
03.02.2019 23.11.10    SSL connection with invalid certificate detected    outlook.live.com    Certificate issued for: outlook.live.com    Certificate error: This certificate or the certificate chain is built on an untrusted root center.    Application: Google Chrome    Time: 2/3/2019 11:11 PM
03.02.2019 23.11.04    SSL connection with invalid certificate detected    static.asm.skype.com    Certificate issued for: static.asm.skype.com    Certificate error: This certificate or the certificate chain is built on an untrusted root center.    Application: Google Chrome    Time: 2/3/2019 11:11 PM
03.02.2019 23.10.32    SSL connection with invalid certificate detected    ipm-provider.ff.avast.com    Certificate issued for: ipm-provider.ff.avast.com    Certificate error: This certificate or the certificate chain is built on an untrusted root center.    Application: CCleaner    Time: 2/3/2019 11:10 PM
03.02.2019 23.10.24    SSL connection with invalid certificate detected    license.piriform.com    Certificate issued for: license.piriform.com    Certificate error: This certificate or the certificate chain is built on an untrusted root center.    Application: CCleaner    Time: 2/3/2019 11:10 PM
03.02.2019 23.06.51    SSL connection with invalid certificate detected    lpcres.delve.office.com    Certificate issued for: lpcres.delve.office.com    Certificate error: This certificate or the certificate chain is built on an untrusted root center.    Application: Google Chrome    Time: 2/3/2019 11:06 PM
03.02.2019 23.06.49    SSL connection with invalid certificate detected    loki.delve.office.com    Certificate issued for: loki.delve.office.com    Certificate error: This certificate or the certificate chain is built on an untrusted root center.    Application: Google Chrome    Time: 2/3/2019 11:06 PM
03.02.2019 23.06.37    SSL connection with invalid certificate detected    client-s.gateway.messenger.live.com    Certificate issued for: client-s.gateway.messenger.live.com    Certificate error: This certificate or the certificate chain is built on an untrusted root center.    Application: Google Chrome    Time: 2/3/2019 11:06 PM
03.02.2019 23.06.34    SSL connection with invalid certificate detected    www.google.com    Certificate issued for: www.google.com    Certificate error: This certificate or the certificate chain is built on an untrusted root center.    Application: Google Chrome    Time: 2/3/2019 11:06 PM
03.02.2019 23.06.20    SSL connection with invalid certificate detected    owassets.azureedge.net    Certificate issued for: owassets.azureedge.net    Certificate error: This certificate or the certificate chain is built on an untrusted root center.    Application: Google Chrome    Time: 2/3/2019 11:06 PM
03.02.2019 23.06.18    SSL connection with invalid certificate detected    swc.cdn.skype.com    Certificate issued for: swc.cdn.skype.com    Certificate error: This certificate or the certificate chain is built on an untrusted root center.    Application: Google Chrome    Time: 2/3/2019 11:06 PM
03.02.2019 23.06.16    SSL connection with invalid certificate detected    safebrowsing.googleapis.com    Certificate issued for: safebrowsing.googleapis.com    Certificate error: This certificate or the certificate chain is built on an untrusted root center.    Application: Google Chrome    Time: 2/3/2019 11:06 PM
03.02.2019 23.06.16    SSL connection with invalid certificate detected    cid-9a26494d3b45877a.users.storage.live.com    Certificate issued for: cid-9a26494d3b45877a.users.storage.live.com    Certificate error: This certificate or the certificate chain is built on an untrusted root center.    Application: Google Chrome    Time: 2/3/2019 11:06 PM
03.02.2019 23.06.11    SSL connection with invalid certificate detected    ow2.res.office365.com    Certificate issued for: ow2.res.office365.com    Certificate error: This certificate or the certificate chain is built on an untrusted root center.    Application: Google Chrome    Time: 2/3/2019 11:06 PM
03.02.2019 23.06.02    SSL connection with invalid certificate detected    static-asm.secure.skypeassets.com    Certificate issued for: static-asm.secure.skypeassets.com    Certificate error: This certificate or the certificate chain is built on an untrusted root center.    Application: Google Chrome    Time: 2/3/2019 11:06 PM
03.02.2019 14.42.35    Task started    Web Anti-Virus    Time: 2/3/2019 2:42 PM
03.02.2019 11.09.25    Task started    Web Anti-Virus    Time: 2/3/2019 11:09 AM
03.02.2019 09.52.28    Task started    Web Anti-Virus    Time: 2/3/2019 9:52 AM

:o


 

Share this post


Link to post

K-SNAFU, hello,

you have another situation - Certificate error: This certificate or the certificate chain is built on an untrusted root center.

The information about this certificate (seems it will not be used anymore): 

"Please note that Google Internet Authority G2 is expiring at the end of 2018 and will not be used anymore. See  Google Trust Services PKI  for more info."

 

Regarding the initial issue (seems like Chromecast related) we need to receieve traces of the issue (enable tracing - reboot - reproduce the issue - disable tracing).

Thanks!

--

UPD regarding Google Internet Authority G2:

I see the following cert for www.google.com

image.png

And find the following info: https://textslashplain.com/2017/10/23/google-internet-authority-g3/

Thus, try to update certificates in your OS.

 

Share this post


Link to post

Hi all,

Bug was created. Thanks for info.

 

#3214641

Share this post


Link to post
1 hour ago, Mefodys said:

K-SNAFU, hello,

you have another situation - Certificate error: This certificate or the certificate chain is built on an untrusted root center.

The information about this certificate (seems it will not be used anymore): 

"Please note that Google Internet Authority G2 is expiring at the end of 2018 and will not be used anymore. See  Google Trust Services PKI  for more info."

 

Regarding the initial issue (seems like Chromecast related) we need to receive traces of the issue (enable tracing - reboot - reproduce the issue - disable tracing).

Thanks!

--

UPD regarding Google Internet Authority G2:

I see the following cert for www.google.com

image.png

And find the following info: https://textslashplain.com/2017/10/23/google-internet-authority-g3/

Thus, try to update certificates in your OS.

 

Mefodys, hello!, Thank you for the Google certificate advice & references. I will investigate & resolve or post back if unable to do so.

Imo, I would've expected Google certificates to update automatically. and, imo, it's most peculiar that GeoTrust Global CA would issue certificates expiring 01/01/2019 if GIA G2 expired at the end of 2018:huh:;  it's equally strange that "SSL connection with invalid certificate detected" just began, which led me to chk the certificates, resulting in finding the "GIA G2 certificate has expired 01/01/2019"


Re the original issue,  "SSL connection with invalid certificate detected" my understanding is BR#3214641 has been raised to address this... No?

Edited by K-SNAFU

Share this post


Link to post

K-SNAFU,

The bug related to the initial case in this thread:  

  

 

 

 

Share this post


Link to post

We have received only 1 set of traces. It will be nice to receive more (enable tracing - reboot - reproduce the issue - disable tracing).  Thanks!

Share this post


Link to post

This sound like axactly the same problem I face. The URL is a hexadecimal thing that leads nowhere and the certificate error (self signed certificate) appears as soon as I start Chrome. 

Any solutions yet? Can I contribute?

 

Certificate error.jpg

Certificate details.jpg

Edited by Digger36

Share this post


Link to post

@Digger36

For me there are two ways to get rid of the domain authentication message

1) Turn off Encrypted connections scanning.

2) leave everything as is, and turn off and remove my Chromecast from the TV.

This all started with the Chrome v72 update

 

Edited by TifKag

Share this post


Link to post
36 minutes ago, TifKag said:

@Digger36

For me there are two ways to get rid of the domain authentication message

1) Turn off Encrypted connections scanning.

2) leave everything as is, and turn off and remove my Chromecast from the TV.

This all started with the Chrome v72 update

 

Turn off Encrypted connections scanning would be a remediation that would reduce security so I am not willing to do that and I use my Chromecast on a regular basis so that is also hardly a solution. 

I'm hoping for a more structural solution from Kaspersky.

Share this post


Link to post
34 minutes ago, TifKag said:

Sorted what ????

My trace files to help them troubleshoot the issue.

Share this post


Link to post
2 minutes ago, G0Nz0 said:

My trace files to help them troubleshoot the issue.

Seems pretty straight forward to me.

Install a windows computer, have a chromecast in the same network, Install Chrome 72, Install KAV or KIS......that's it.

Have 2 computers here with the same problem.:(:(

I only hope, when they offer a solution it wil also be for KAV 2018 (Sorry, but i had a lot of problems with KAV 2019)

 

Share this post


Link to post
18 hours ago, Mefodys said:

K-SNAFU, hello,

you have another situation - Certificate error: This certificate or the certificate chain is built on an untrusted root center.

The information about this certificate (seems it will not be used anymore): 

"Please note that Google Internet Authority G2 is expiring at the end of 2018 and will not be used anymore. See  Google Trust Services PKI  for more info."

 

Regarding the initial issue (seems like Chromecast related) we need to receieve traces of the issue (enable tracing - reboot - reproduce the issue - disable tracing).

Thanks!

--

UPD regarding Google Internet Authority G2:

I see the following cert for www.google.com

image.png

And find the following info: https://textslashplain.com/2017/10/23/google-internet-authority-g3/

Thus, try to update certificates in your OS.

 

 

17 hours ago, K-SNAFU said:

 

Hello Mefodys, 

Re [GIA G2 Cert expired 01/01/2019]try to update certificates in your OS.

Followed [Google Trust Services PKI] [https://pki.goog/]
I (already had & (already) have installed:[CA certificates]

GTS Root R1    RSA 4096, SHA-384    e1:c9:50:e6:ef:22:f8:4c:56:45:72:8b:92:20:60:d7:d5:a7:a3:e8    Jun 22, 2036    DER CRL    g r e
GTS Root R2    RSA 4096, SHA-384    d2:73:96:2a:2a:5e:39:9f:73:3f:e1:c7:1e:64:3f:03:38:34:fc:4d    Jun 22, 2036    DER CRL    g r e
GTS Root R3    ECC 384, SHA-384    30:d4:24:6f:07:ff:db:91:89:8a:0b:e9:49:66:11:eb:8c:5e:46:e5    Jun 22, 2036    DER CRL    g r e
GTS Root R4    ECC 384, SHA-384    2a:1d:60:27:d9:4a:b1:0a:1c:4d:91:5c:cd:33:a0:cb:3e:2d:54:cb    Jun 22, 2036    DER CRL    g r e

&  & [https://textslashplain.com/2017/10/23/google-internet-authority-g3/]
Noting, I'm not encountering:

NET::ERR_CERT_AUTHORITY_INVALID 
&
https://good.gsr2demo.pki.goog/

Google (Certifictate) Trust Services Page
Expected Status: good

& confirmed:

[direct Windows to check its trusted certificate list against the WindowsUpdate servers by running] 

[certutil -f -verifyCTL AuthRootWU]

All of which did not change the [GIA G2 Cert expired 01/01/2019]
Following this I:
uninstalled Google Chrome entirely
stripped system of all traces of Google Chrome
reinstalled Google Chrome

[GIA G2 Cert expired 01/01/2019] remained.

I repeated the process (interspersed with system reboots)
uninstalled Google Chrome entirely
stripped system of all traces of Google Chrome
reinstalled Google Chrome

[GIA G2 Cert expired 01/01/2019] remained.

As I believe Google/Microsoft-Windows/Kaspersky etc automatically manage their certificates and find it highly unusual, with a clean install - twice, Google would populate with an expired certificate - I deleted the offending certificate. 

Share this post


Link to post
19 hours ago, Mefodys said:

K-SNAFU, hello,

Regarding the initial issue (seems like Chromecast related)

Thanks! 

Hello  Mefodys,
Re (seems like Chromecast related) I don't have/use any Chromecast products.

Didn't even know what it is (had to: https://en.wikipedia.org/wiki/Chromecast) to find out:)

Cheers!

 

 

Edited by K-SNAFU
txt correction

Share this post


Link to post

Seems they have identified the issue, not sure what happens next, I will leave it to @Mefodys to reply with the next steps.

Share this post


Link to post

Was this ever solved? 4 years later and I just started having the same exact issue out of the blue..
Application: Google Chrome
URL: d1a21711-8d59-fd46-ca67-887cb85b7806
Reason: Self-signed certificate

And the certificate is good for 2 days..

Share this post


Link to post

×
×
  • Create New...

Important Information

We use cookies to make your experience of our websites better. By using and further navigating this website you accept this. Detailed information about the use of cookies on this website is available by clicking on more information.