Client is getting 'Expired SSL Server Certificate' exception page when browsing the HTTPS website.

Products

• ProxySG Software - SGOS

Issue/Introduction

Below is the full error message that the client received:

************************************************************

Expired SSL Server Certificate (ssl_server_cert_expired)
 
Your request contacted a host that presented an expired or Invalid certificate 
This is typically caused by a Web Site presenting an incorrect or invalid certificate but could be because of a configuration error. 
*************************************************************

When bypassing the ProxySG there is no error.

Checking the validity of the certificate when browsing the website without going through the Blue Coat SG seems to be ok, the certificate is still valid.

Resolution

The issue is due to the certificate being sent by the server. The certificate that expired is actually the CA certificate that signed the server certificate.