IMPORTANT INFORMATION -- Please read!

1. The "search..." box above searches the Docs & Forum Posts. The "Search" tab above just searches the Forum Posts. :side:
Please use these to search for your issue *before* creating a new message topic, as your issue may have been previously solved.
2. Please put your Club # and Club Web Address in your Forum Signature (best) OR in each post to get faster support from us.
Click here to edit your signature at the bottom of the Profile Information tab.
3. Our user and admin docs are available at: support.toastmastersclubs.org/doc "There's a doc for that!"
4. There is an "Opt In" Feature for newly added members. The Opt In document explains the [strike]strikethrough[/strike] member information. Click Here to View the Post
5. When posting a New Topic , please include all relevant details and be specific. When did your issue 1st occur? What operating system, browser, & browser version are you using? Did you refresh your browser cache? Are your cookies enabled? Lastly, a screen shot is often helpful.
6. Please abide by the Terms of Use . We are volunteers contributing our spare time. We are happy to assist you, so long as you are respectful and courteous.
7. We are always looking for new FreeToastHost Ambassadors to join our team and support fellow Toastmasters in their use of the FreeToastHost website system. If you are familiar with the system and have some interest, send a Send Us a Private Message.

Expired Certificate Custom Domain Name

columbiatm
Offline
New Member

More

3 years 9 months ago - 3 years 9 months ago #85318 by columbiatm

Replied by columbiatm on topic Expired Certificate Custom Domain Name

The problem is that the FreeToastHost server is configured to send back the wrong intermediate certificate in the chain. This article explains Let’s Encrypt’s new root and intermediate certificates: letsencrypt.org/2020/09/17/new-root-and-intermediates.html

You can verify that the FreeToastHost server is incorrectly sending back the X3 intermediate certificate, even though it’s supposed to be sending back the R3 intermediate certificate here: www.sslshopper.com/ssl-checker.html As it says on that page, “The certificate is not trusted in all web browsers. You may need to install an Intermediate/chain certificate to link it to a trusted root certificate”

Although some implementations have some flexibility when verifying certificate chains, Apple is not at fault here. They are validating the chain properly. The correct way to fix this is to ensure the FreeToastHost server sends back the correct R3 intermediate certificate.

Let me know if you have any questions or need me to clarify further. As always, thank you for your work on FreeToastHost!

Last edit: 3 years 9 months ago by columbiatm.

The topic has been locked.