<![CDATA[Certificate error accessing site due to expired cert in trust chain]]>Our staff are experincing issues accessing https://windy.com due to an expired certificate in the trust chain which is not playing well with Fortigate firewalls in certain configurations. This prevents staff from accessing the site at all with the following error

5c8f2144-47f6-4237-b585-e1f64204bcfb-image.png

This is because the windy.com R3 certificate has a expired cert in its trust chain

12e07bbb-1fdd-449a-b4da-655a47d05a9b-image.png - https://www.ssllabs.com/ssltest/analyze.html?d=www.windy.com&s=143.204.128.52

The Fortigate issue is documented here - https://www.fortinet.com/blog/psirt-blogs/fortinet-and-expiring-lets-encrypt-certificates

and the expected certificate expiry is documented here - https://letsencrypt.org/docs/dst-root-ca-x3-expiration-september-2021/

The ultimate fix is for the windy.com certificate to be renewed without the expired cert in the trust chain. Can this please be arranged?

]]>https://community.windy.com/topic/18081/certificate-error-accessing-site-due-to-expired-cert-in-trust-chainRSS for NodeSun, 12 Jul 2026 15:09:55 GMTTue, 05 Oct 2021 02:06:46 GMT60<![CDATA[Reply to Certificate error accessing site due to expired cert in trust chain on Thu, 21 Oct 2021 07:50:57 GMT]]>@meteo2021 Hello, you may have a problem if you have an older operating system (Windows < XP SP3 or macOS < 10.12.1). Did you try the Mozilla browser 93.0.?

]]>https://community.windy.com/post/90308https://community.windy.com/post/90308Thu, 21 Oct 2021 07:50:57 GMT<![CDATA[Reply to Certificate error accessing site due to expired cert in trust chain on Wed, 20 Oct 2021 19:27:30 GMT]]>@korina Okay, is the latest version of Google Chrome Version 95.0.4638.54 (Official Build) (64-bit) an older browser and is there a possibility to access it through this browser?

]]>https://community.windy.com/post/90272https://community.windy.com/post/90272Wed, 20 Oct 2021 19:27:30 GMT<![CDATA[Reply to Certificate error accessing site due to expired cert in trust chain on Fri, 08 Oct 2021 06:00:02 GMT]]>@brian-voller Hello, as I mentioned, we stopped supporting old root certificates on older browsers - https://letsencrypt.org/docs/dst-root-ca-x3-expiration-september-2021/

We can recommend to use updated OS. Or if you still have issues, use the latest Mozilla browser 93.0., where you should not have any problems, since Mozilla downloads certificates on its own and does not rely on OS.

]]>https://community.windy.com/post/89200https://community.windy.com/post/89200Fri, 08 Oct 2021 06:00:02 GMT<![CDATA[Reply to Certificate error accessing site due to expired cert in trust chain on Wed, 06 Oct 2021 18:55:03 GMT]]>@korina Yes. The issue for us is that windy.com is using a certificate with an EXPIRED certificate in its trust chain as shown above.

]]>https://community.windy.com/post/89058https://community.windy.com/post/89058Wed, 06 Oct 2021 18:55:03 GMT<![CDATA[Reply to Certificate error accessing site due to expired cert in trust chain on Wed, 06 Oct 2021 06:10:09 GMT]]>@brian-voller Hello, did you clear your cache please?

]]>https://community.windy.com/post/89004https://community.windy.com/post/89004Wed, 06 Oct 2021 06:10:09 GMT<![CDATA[Reply to Certificate error accessing site due to expired cert in trust chain on Tue, 05 Oct 2021 21:24:04 GMT]]>This issue IS occurring in modern browsers
e.g.
Chrome 94.0.4606.71
Edge 94.0.992.38

]]>https://community.windy.com/post/88979https://community.windy.com/post/88979Tue, 05 Oct 2021 21:24:04 GMT<![CDATA[Reply to Certificate error accessing site due to expired cert in trust chain on Tue, 05 Oct 2021 07:11:00 GMT]]>@brian-voller Hello, please see the related post.

We have stopped supporting certificates for older browsers, more information here. You will need to upgrade your browser.

]]>https://community.windy.com/post/88911https://community.windy.com/post/88911Tue, 05 Oct 2021 07:11:00 GMT