同样的另外一个使用由 TrustAsia DV TLS RSA CA 2025 所签发的 SSL 证书的网站,在同一老旧设备系统下也是出现NET::ERR_CERT_AUTHORITY_INVALID的错误,都已经老生常谈的解决办法了吧!
按图索骥依葫芦画瓢,根据证书链去找到所对应的根证书下载即可,由于前一个证书走“捷径”下载的,因此这一个也是如此操作了,懒得去对应官网翻找了。
证书信息:
Issuer: CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=(c) 2006 VeriSign\, Inc. - For authorized use only,OU=VeriSign Trust Network,O=VeriSign\, Inc.,C=US CN=DigiCert Global Root G2,OU=www.digicert.com,O=DigiCert Inc,C=US Serial: 131718454893249650824332873540371544128 4293743540046975378534879503202253541 Not valid before: 2017-11-06 00:00:00 UTC 2013-08-01 12:00:00 UTC Not valid after: 2022-11-05 23:59:59 UTC 2038-01-15 12:00:00 UTC Key size: 2048 Signature Algorithm: sha256WithRSAEncryption subjectKeyIdentifier: 4E:22:54:20:18:95:E6:E3:6E:E6:0F:FA:FA:B9:12:ED:06:17:8F:39 basicConstraints: CA:TRUE certificatePolicies: Policy: X509v3 Any Policy CPS: https://d.symcb.com/cps User Notice: Explicit Text: https://d.symcb.com/rpa crlDistributionPoints: Full Name: URI:http://s.symcb.com/pca3-g5.crl keyUsage: Digital Signature, Certificate Sign, CRL Sign authorityInfoAccess: OCSP - URI:http://s.symcd.com authorityKeyIdentifier: keyid:7F:D3:65:A7:C2:DD:EC:BB:F0:30:09:F3:43:39:FA:02:AF:33:31:33
其中发现这里有两个证书可供下载,二话不说还是下载属于self signed的先。
-----BEGIN CERTIFICATE----- MIIDjjCCAnagAwIBAgIQAzrx5qcRqaC7KGSxHQn65TANBgkqhkiG9w0BAQsFADBh MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBH MjAeFw0xMzA4MDExMjAwMDBaFw0zODAxMTUxMjAwMDBaMGExCzAJBgNVBAYTAlVT MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j b20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IEcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzfNNNx7a8myaJCtSnX/RrohCgiN9RlUyfuI 2/Ou8jqJkTx65qsGGmvPrC3oXgkkRLpimn7Wo6h+4FR1IAWsULecYxpsMNzaHxmx 1x7e/dfgy5SDN67sH0NO3Xss0r0upS/kqbitOtSZpLYl6ZtrAGCSYP9PIUkY92eQ q2EGnI/yuum06ZIya7XzV+hdG82MHauVBJVJ8zUtluNJbd134/tJS7SsVQepj5Wz tCO7TG1F8PapspUwtP1MVYwnSlcUfIKdzXOS0xZKBgyMUNGPHgm+F6HmIcr9g+UQ vIOlCsRnKPZzFBQ9RnbDhxSJITRNrw9FDKZJobq7nMWxM4MphQIDAQABo0IwQDAP BgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIBhjAdBgNVHQ4EFgQUTiJUIBiV 5uNu5g/6+rkS7QYXjzkwDQYJKoZIhvcNAQELBQADggEBAGBnKJRvDkhj6zHd6mcY 1Yl9PMWLSn/pvtsrF9+wX3N3KjITOYFnQoQj8kVnNeyIv/iPsGEMNKSuIEyExtv4 NeF22d+mQrvHRAiGfzZ0JFrabA0UWTW98kndth/Jsw1HKj2ZL7tcu7XUIOGZX1NG Fdtom/DzMNU+MeKNhJ7jitralj41E6Vf8PlwUHBHQRFXGU7Aj64GxJUTFy8bJZ91 8rGOmaFvE7FBcf6IKshPECBV1/MUReXgRPTqh5Uykw7+U0b6LJ3/iyK5S9kJRaTe pLiaWN0bfVKfjllDiIGknibVb63dDcY3fe0Dkhvld1927jyNxF1WW6LZZm6zNTfl MrY= -----END CERTIFICATE-----
使用这个证书可知:在信任链层级、 SHA-256 指纹都与新系统内置的证书相差无几,因此暂时可以先不安装e995ef9126这个了。
系统这么老看来还有得安装根证书的,因此还是放出捷径以备不时之需:
- DigiCert Global Root G2
https://ssl-tools.net/subjects/39d28b71fe1d19b65fb3f1288f23bc04595c4395 - Root Certificates
https://ssl-tools.net/certificates
ChiuYut
2026年08月04日