TOPIC:

A few hours ago, our club president tried to log in, and saw the alert I've attached: "Your connection isn't private..." and couldn't log in. Most of our members work for State government, and routinely log in from inside their firewalls.  When I tried to log in, I saw what I normally see...

Nick Almasy, VPE
Toastnotables Club 2345

 

Maybe our SSL certificate has expired?

The certificate is valid until Wed, 21 Aug 2024 20:04:32 GMT, youu can check it yourself by clicking on the lock beside the URL.
Have your president clear their browser cache.

Hi Brian, 
I am the SAA of a closed corporate club (8159, True Blue Toastmasters). We are having the same issue logging in with our corporate computers. Because of our enhanced security and firewall, when we log in, we get a "not secure" message. Our IT department has determined that it is an issue with the way the new site security certificate was updated. 
These are the instructions we were asked to pass along to FTH support. 

Whomever updated the certificate following the issuance (Friday, July 21, 2023 at 4:04:33 PM) failed to
install the intermediate certificate required to maintain the chain of trust for the certificate.
  
Attached is the output for an external check of the certificate installed on the bcbsnc.toastmastersclubs.org site:
This evidence comes from DigiCert’s site:  www.digicert.com/help/ 
You may navigate to the DigiCert site and enter bcbsnc.toastmastersclubs.org to see the status including the intermediate certificate. Instructions for properly installing the intermediate certificate are located on their website. The intermediate certificate must be installed for Next Gen Firewalls and newer browsers to validate the certificate chain of trust.

Happening to club #9648 with several members of same corporate network.
Getting message: "NetScaler had identified a zero-day security vulnerability. This means that organizations that use this product are being actively attacked and hackers are able to penetrate into their systems using this vulnerability."

 

Duane Noto, club #9648

Your company uses a proxy that needs to clear it's cache.

Our corporate IT partners have assured us that they have done all that can be done on our end. At this point, as long as the security certificate is improperly installed, the error will continue to repopulate. I just checked Digicert and the error is still showing. TLS Certificate is not trustedThe certificate is not signed by a trusted authority (checking against Mozilla's root store). If you bought the certificate from a trusted authority, you probably just need to install one or more Intermediate certificates. Contact your certificate provider for assistance doing this for your server platform.It appears your certificate is issued by GlobalSign - you can find the full instructions to properly install the intermediate certficate here: 
Install an SSL Certificate - Overview :: Install an SSL Certificate - Overview :: GlobalSign Support I hope that helps. I appreciate all the work this must take to run as a volunteer, so thank you for looking into this further for us. 

I have verified and I am not seeing any errors and the encryption is TLS 1.2

this is for a custom domain


and this is for toastmastersclubs.org

TLS Certificate expirationThe certificate expires October 13, 2023 (77 days from today)
Certificate Name matches www.catval.com
Subjectcatval.comValid from 15/Jul/2023 to 13/Oct/2023IssuerR3  
SubjectR3Valid from 04/Sep/2020 to 15/Sep/2025IssuerISRG Root X1  
SubjectISRG Root X1Valid from 04/Jun/2015 to 04/Jun/2035IssuerISRG Root X1
TLS Certificate is correctly installed 

TLS Certificate has not been revoked
OCSP Staple:Not Enabled
OCSP Origin:GoodCRL Status:Good 
TLS Certificate expirationThe certificate expires August 21, 2024 (390 days from today)
Certificate Name matches www.toastmastersclubs.org
Subject*.toastmastersclubs.orgValid from 21/Jul/2023 to 21/Aug/2024IssuerAlphaSSL CA - SHA256 - G4  
SubjectAlphaSSL CA - SHA256 - G4Valid from 12/Oct/2022 to 12/Oct/2027
IssuerGlobalSign Root CA
TLS  Certificate is correctly installed

Brian,

Our club president has verified as well that it's working normally.

Thanks.