Client is getting 'Expired SSL Server Certificate' exception page when browsing the HTTPS website.

Products

• ProxySG Software - SGOS

Issue/Introduction

Below is the full error message that client received:

************************************************************

Expired SSL Server Certificate (ssl_server_cert_expired)
 
Your request contacted a host which presented an expired or Invalid certificate 
This is typically caused by a Web Site presenting an incorrect or invalid certificate, but could be because of a configuration error. 
*************************************************************

When bypassing the ProxySG there is no error.

Checking the validity of the certificate when browsing the website without going through the Blue Coat SG seems to be ok, the certifcate is still valid.

Resolution

The issue is due to the certificate been sent by the server. The certificate that expired is actually the CA certificate that signed the server certificate.

This type of issue is not proxy related, the administrator needs to check with the server administrator regarding to the CA certificate that had expired.