No post body was provided.
GoDaddy Cert and Chrome Update = Net:Err_certificate_transparency_required
21–28 of 28 posts
Re: GoDaddy Cert and Chrome Update = Net:Err_certificate_transparency_required
#22No post body was provided.
Re: GoDaddy Cert and Chrome Update = Net:Err_certificate_transparency_required
#23Hi all- I have 2 sites with SSL certs with Godaddy and both started having this exact problem a few hours ago.. only with chrome, works fine in bing and firefox. on windows 10 desktop. I tried costco.com and got the same error. Called Godaddy a minute ago and they said they can't comment on any other customers but said using chrome on his end he could access both my sites and costco without any error. My sites' certs…
I was on chat with godaddy and they said that any certs that were issued before June 2020 will not be on any of Google's SCTs and that they will need to be re-keyed. I did that with a new cert as ours was expiring in July and that has fixed it for us. So give re-keying a try.
This is going to be a very annoying thing for us, if true. Our April 2020 issued Cert expires in July and was on track to roll out a new cert in two weeks. This means we get to push up the timetable and do an out-of-sequence patch roll to address this in over 100 environments.
Fun night ahead.
The weird part is, if you click on the error in chrome, it displays the Cert Details, including this wonderful gem:
Certificate Transparency:
SCT Google 'Pilot' log (Embedded in certificate, Verified)
SCT Google 'Rocketeer' log (Embedded in certificate, Verified)
SCT DigiCert Log Server (Embedded in certificate, Verified)Re: GoDaddy Cert and Chrome Update = Net:Err_certificate_transparency_required
#24The response I got from Godaddy and worked for us:
Chrome retired some CT logs on May 1st. For OLD certificates, that is ones issued sometime before June 2020, they might contain SCTs that have now all been retired by Google. Normally this should not be an issue, but if ALL the SCTs on a certificate are now retired, then the it looks like the most recent version of Chrome will not trust it.
You need to rekey the SSL by generating a new CSR from hosting plan and then you need to upload the new SSL files in the hosting plan please.
Re: GoDaddy Cert and Chrome Update = Net:Err_certificate_transparency_required
#25[deleted]
Re: GoDaddy Cert and Chrome Update = Net:Err_certificate_transparency_required
#26Earlier quoted context omitted.
I was on chat with godaddy and they said that any certs that were issued before June 2020 will not be on any of Google's SCTs and that they will need to be re-keyed. I did that with a new cert as ours was expiring in July and that has fixed it for us. So give re-keying a try.
This is going to be a very annoying thing for us, if true. Our April 2020 issued Cert expires in July and was on track to roll out a new cert in two weeks. This means we get to push up the timetable and do an out-of-sequence patch roll to address this in over 100 environments. Fun night ahead. The weird part is, if you click on the error in chrome, it displays the Cert Details, including this wonderful gem: Certifica…
https://groups.google.com/a/chromium.org/g/ct-policy/c/abPZR...
Pilot and Rocketeer were just shut down, however, I'm surprised this had any impact because the above post says:
> If you are delivering SCTs embedded in the certificate, this should require no action on your part. All previously-issued certificates containing SCTs from these logs that complied with the Chrome CT Policy will continue to do so.
Edit: Ah but if /all/ the logs are retired, it's no longer valid. So if you have two retired google logs + a digicert log that's presumably also retired, the SCTs are no longer acceptable.
Re: GoDaddy Cert and Chrome Update = Net:Err_certificate_transparency_required
#27Hi all- I have 2 sites with SSL certs with Godaddy and both started having this exact problem a few hours ago.. only with chrome, works fine in bing and firefox. on windows 10 desktop. I tried costco.com and got the same error. Called Godaddy a minute ago and they said they can't comment on any other customers but said using chrome on his end he could access both my sites and costco without any error. My sites' certs…
I was on chat with godaddy and they said that any certs that were issued before June 2020 will not be on any of Google's SCTs and that they will need to be re-keyed. I did that with a new cert as ours was expiring in July and that has fixed it for us. So give re-keying a try.
My problem is solved for both of my sites. I renewed both certs and uploaded them and each site now loads fine in chrome. Thank you to everyone who posted in this thread. I can now go get a beer!