How to update an expired SSL certificate?

Forums › Desktop computing › How to update an expired SSL certificate?

jim.cox

224 posts

Master Geek

#288714 18-Jul-2021 09:07

Google Earth is broken for me.

I keep getting SSL certificate error warnings.

Digging deeper I find that the certificate for google.com has expired.

How do I go about getting another?

advTHANKXance

=Jim=

=mjc=
.

mentalinc

3240 posts

Uber Geek

Trusted

#2746149 18-Jul-2021 09:10

Do you have a link?

This is a failure on google. nothing you can do until they fix it

CPU: AMD 5900x | RAM: GSKILL Trident Z Neo RGB F4-3600C16D-32GTZNC-32-GB | MB: Asus X570-E | GFX: EVGA FTW3 Ultra RTX 3080Ti| Monitor: LG 27GL850-B 2560x1440

Quic: https://account.quic.nz/refer/473833 R473833EQKIBX

Behodar

10510 posts

Uber Geek

Trusted

Lifetime subscriber

#2746150 18-Jul-2021 09:12

Can you post a screenshot of the error? I can assure you that the certificate for google.com has NOT expired!

jim.cox

224 posts

Master Geek

#2746152 18-Jul-2021 09:25

And Yes, I have tried reinstalling...

=mjc=
.

Behodar

10510 posts

Uber Geek

Trusted

Lifetime subscriber

#2746153 18-Jul-2021 09:30

Open a command prompt and enter this to force a certificate update, and see what happens:

certutil -f -verifyCTL AuthRootWU

jim.cox

224 posts

Master Geek

#2746154 18-Jul-2021 09:34

=mjc=
.

Behodar

10510 posts

Uber Geek

Trusted

Lifetime subscriber

#2746156 18-Jul-2021 09:36

Argh, it seems that verifyCTL doesn't work on Windows 7 (the article I was reading just said "some versions" which wasn't very helpful!)

I'm going to leave this one for someone more experienced.

jim.cox

224 posts

Master Geek

#2746184 18-Jul-2021 11:01

perhaps I should re-phrase my original question...

Let's try

So how is SSL certificate renewal supposed to happen?

=mjc=
.

Quic Broadband

Move to New Zealand's best fibre broadband service (affiliate link). Free setup code: R587125ERQ6VE. Note that to use Quic Broadband you must be comfortable with configuring your own router.

michaelmurfy

meow
13262 posts

Uber Geek

Moderator

ID Verified

Trusted

Lifetime subscriber

#2746190 18-Jul-2021 11:27

You’re running an unsupported version of Windows which likely has root cert issues. You should seriously upgrade to Windows 10 in order to get security updates etc. Windows 7 has not been supported in over a year now (January 14, 2020).

You also don’t ever have to renew a cert on a site you don’t operate. You only renew certs on sites you own.

Michael Murphy | https://murfy.nz
Referral Links: Quic Broadband (use R122101E7CV7Q for free setup)

Are you happy with what you get from Geekzone? Please consider supporting us by subscribing.
Opinions are my own and not the views of my employer.

freitasm

BDFL - Memuneh
79303 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#2746191 18-Jul-2021 11:28

Are you running Windows 7?

Behodar

10510 posts

Uber Geek

Trusted

Lifetime subscriber

#2746194 18-Jul-2021 11:43

You could try the steps listed about halfway down this page to manually install the root certificate. No idea whether it'll fix it or not though.

djtOtago

1153 posts

Uber Geek

#2746195 18-Jul-2021 11:45

It's the web site owner's responsibility to update and maintain the certificate. There is nothing you as the user can do.

In this case I think your outdated version of the Google earth application is trying to open some old and no longer maintained link.

Behodar

10510 posts

Uber Geek

Trusted

Lifetime subscriber

#2746197 18-Jul-2021 11:46

djtOtago: In this case I think your outdated version of the Google earth application is trying to open some old and no longer maintained link.

I was wondering about that, but kh.google.com still has a valid certificate.

cyril7

9058 posts

Uber Geek

ID Verified

Trusted

Subscriber

#2746214 18-Jul-2021 13:18

Hi, yeah went to google earth web that also refences kh. in its cert and its fully valid, as others have said, you probably have run out of root cert updates as you are using Win7, sorry but reality is, time to move on.

Cyril

jim.cox

224 posts

Master Geek

#2746289 18-Jul-2021 18:03

cyril7:

as others have said, you probably have run out of root cert updates as you are using Win7, sorry but reality is, time to move on.

Cyril

Sort of half figured as much

Was working yesterday, is now borken :(

I suspect last week's MS-Edge update has done for me

Thank you tech. Like I really need this bs right now

Sigh :(

Thanks for all your help and comments everyone :)

=mjc=
.

jim.cox

224 posts

Master Geek

#2747379 21-Jul-2021 05:28

Bingo - got it fixed

Solution is similar to that suggested by Behodar

Exported the GlobalSign certificates from another machine (I have several - including win7, win10 and Ubuntu)

Imported into the machine in question

And we are good to go.

=Jim=

Actually now thinking I might step this box back to XP to run some of my old Lego (webcam and early mindstorms) and slide scanner

=mjc=
.