Users encountered the `ERR_CERT_AUTHORITY_INVALID` error when visiting sites from discovery.us1.arctera.com

Products

• Cloud Secure Web Gateway - Cloud SWG

Issue/Introduction

Users encountered the `ERR_CERT_AUTHORITY_INVALID` error in Google Chrome and Microsoft Edge when accessing the sites through Cloud Secure Web Gateway (Cloud SWG).

Cause

The issue is caused by a misconfiguration on the Origin Content Server (OCS). Specifically, the certificate presented by the destination server does not contain the requested hostname in its "Subject" or "Subject Alternative Name (SAN)" fields.

We can also see the issue even when Cloud SWG / WSSA / ESA is disabled which speaks about the issue being on the OCS. Hence this is not a Cloud SWG issue.

Resolution

To resolve this issue, the certificate on the destination server must be updated to match the requested hostname.

Contact the website owner and inform them to update their certificate.