What does the exception "Expired SSL Server Certificate (ssl_server_cert_expired)" mean?

book

Article ID: 167736

calendar_today

Updated On:

Products

ProxySG Software - SGOS

Issue/Introduction

If your ProxySG appliance is configured to intercept HTTPS traffic, you may see cases where the proxy presents the exception: "Expired SSL Server Certificate" and the following default error message:

Expired SSL Server Certificate (ssl_server_cert_expired)
Your request contacted a host which presented an expired or Invalid certificate
This is typically caused by a Web Site presenting an incorrect or invalid certificate, but could be because of a configuration error.

For assistance, contact your network support team.
 
This can be caused by a certificate that has either expired or is not yet valid, (issued for a future date).
 
 
 
The problem could also be related to a Proxy time and date misconfiguration. You can check the clock and date from the Proxy's Web-Based Management Console:
 
 
 
or from the CLI:
 
10.91.22.2 - Blue Coat SG210 Series>show clock
 
UTC time:     2001-09-26 14:58:50+00:00UTC
 
Local time:   2001-09-26 14:58:50-00:00UTC
 
Timezone:     UTC
 
 
 
If the certificate has expired, create a new one to replace it.