what is a security certificate (for a webmaster)?

Question

I am a Graphic designer temporarily responsible for a website, & I don't know much about the technicality.since yesterday the website has been showing this page when a user logs on to it:

in firefox:
" Secure Connection Failed

this website uses an invalid security certificate.

The certificate expired on 11/29/2009 01:59 AM.

(Error code: sec_error_expired_certificate)

* This could be a problem with the server's configuration, or it could be someone trying to impersonate the server.

* If you have connected to this server successfully in the past, the error may be temporary, and you can try again later.

Or you can add an exception… "

in Iexplorer:
" There is a problem with this website's security certificate.

The security certificate presented by this website has errors, and should not be trusted.
Security certificate problems may indicate an attempt to fool you or intercept any data you send to the server.
We recommend that you close this webpage and do not continue to this website.
Click here to close this webpage.
Continue to this website (not recommended). "

so, what is this security certificate that has expired? is it like some service you have to pay for? or what??? ( & I've checked the site with google's webmaster tools, & there's nothing wrong with it)

Answer 1

A security certificate acts as the key used to decrypt encrypted messages by an authenticated message receiver. NIU uses the Secure Socket Layer (SSL) for transmitting and accepting secure information (such as passwords) or for encrypting entire sessions that are expected to contain private or confidential information. SSL is a standard method for protecting web communications by providing message encryption, server authentication, message integrity and client authentication for a TCP/IP connection.



NIU Information Technology Services provides 128-bit encryption of information on a secure socket layer. This advanced security measure helps to protect personal information from being exploited.



By accepting the NIU certificate you will be adding NIU to the list of trusted certificating authorities your computer acknowledges and approves.



There are currently two NIU Security certificates being used by different web-based applications. Users are advised to install them both. This will prevent warning messages from being displayed as NIU web-based applications requiring authentication are accessed. Since (in general) browsers do not share data, users may need to install the certificates into each browser application that is being used on their computer. For example, a certificate installed into Internet Explorer will not work for Mozilla Composer and vice-versa. Mozilla Communicator and Netscape share data, so it is not necessary to install the certificates for both products on the same computer.

Answer 2

A security certificate is a digital file that is issued by organizations that verify that a site is actually what/who it claims to be. The certificates are used mostly for SSL (Secure Sockets Layer) encryption, and are generally found on any site where sensitive data has to cross the wires. If you see "https" in the site's URL, the site is using a certificate. The most common use is in shopping, banking and other money-transaction sites.



SSL certificates are installed by the server administrator (in most cases), and require configuration changes to be made to the web server application that hosts the site. You need to speak to the web hosting administrator or whoever performed this function before you.



The certificates are data to be valid within a certain range of dates, and yours has apparently expired, which is why you're seeing those errors.

Answer 3

"joe..." gives nifty advice.



Alternately, it may be your computer that has the problem.

Odd as it sounds, your systems' time must be synchronized to the actual time. Although your machines 'on-board' certificate library may be current, the machine's time is not correct, rendering a mismatch for the sites certificate parameters.

Right click the system tray time clock> Adjust time & Date> Internet time> Update now. (Make sure your system is set to 'Automatic Synchronize...' while you're here)



Another possible fix (XP):

With Internet Explorer, go to Microsoft Updates, then select the 'Custom' button (not the 'Express'). That will tell you all specific updates for your computer (hardware & software) and in this case the certificate updates.



Note: persistent time malfunction could mean malware problem or a motherboard battery issues.



Also of significant import>> Make certain to have this configuration in your browser:

Tools> Internet options> Advanced> Security heading: check "Warn about certificate mismatch" OK out.

This is really critical to prevent spoofing of SSL certificate issuance, potentially showing the lock and "https://" when in fact it is NOT the real McCoy.

Answer 4

the subsequent time it asks you're saying enable continually and it will possibly not ask you everytime. verify your gadget time on that server certificates this is expired. you additionally can attempt to scrub all income all your browsers and all temp and tmp folders on your hard disk drive. Do seek it may help