iis-7 - 该组织的证书已被吊销

Question

我刚刚安装了 Thawtes 提供的中间证书，并为位于我们网络上防火墙负载后面的测试站点安装了他们的 SSL 证书。

DNS 查询仅供内部查询。

我在本地运行了 Thawte 提供的测试验证服务，它响应成功。

然而，尝试通过 https://访问该站点时，显示该组织的证书已被吊销。

如果我在 firefox 中禁用在线证书状态协议(protocol)，我可以查看我的站点，但这显然不是一个选项。

有没有人遇到过这个问题？是因为我是完全内部的，SSL 提供商看不到我的网站吗？

需要帮助了解出了什么问题。

这是检查器的输出:

test.elife.co.uk 已成功通过 SSL 证书进行保护。已正确安装以下证书:

------Certificate 1------
--Issued To--
Organization: test.elife.co.uk 
Organizational Unit: Domain Validated 
Organizational Unit 2: Thawte SSL123 certificate 
Organizational Unit 3: Go to https://www.thawte.com/repository/index.html 
Common Name: test.elife.co.uk  
--Issued By-- Organization: Thawte,, Inc. 
Organizational Unit: Domain Validated SSL 
Common Name: Thawte DV SSL CA 
Country: US 
Valid from Thu Sep 23 01:00:00 BST 2010 to Sat Sep 24 00:59:59 BST 2011 
Serial Number (hex): a6e84e4a3e7ed5b61d26c2667384cec 
-------------------------
------Certificate 2------ 
--Issued To-- Organization: Thawte,, Inc. 
Organizational Unit: Domain Validated SSL 
Common Name: Thawte DV SSL CA 
Country: US  
--Issued By-- 
Organization: thawte,, Inc. 
Organizational Unit: (c) 2006 thawte,, Inc. - For authorized use only 
Organizational Unit 2: Certification Services Division 
Common Name: thawte Primary Root CA 
Country: US  
Valid from Thu Feb 18 00:00:00 GMT 2010 to Mon Feb 17 23:59:59 GMT 2020 
Serial Number (hex): 7610128a17b682bb3a1f9d1a9a35c092
------------------------- 
------Certificate 3------ 
--Issued To-- 
Organization: thawte,, Inc. 
Organizational Unit: (c) 2006 thawte,, Inc. - For authorized use only 
Organizational Unit 2: Certification Services Division 
Common Name: thawte Primary Root CA 
Country: US  
--Issued By-- 
Organization: Thawte Consulting cc 
Organizational Unit: Certification Services Division 
Common Name: Thawte Premium Server CA 
Locale: Cape Town, Western Cape 
Country: ZA  
Valid from Fri Nov 17 00:00:00 GMT 2006 to Wed Dec 30 23:59:59 GMT 2020 
Serial Number (hex): 3365500879ad73e230b9e01d0d7fac91 
------------------------- 

提前致谢。

Answer 1

消息说得很清楚:证书(链中的证书之一)已被吊销。除非您禁用 OCSP 检查，否则正在联系的 OCSP 服务会报告此吊销状态。这意味着该证书不再受信任，如果您使用它(或其子证书)来证明您的公共(public)站点，您的用户将遇到同样的错误。您需要联系 Thawte 支持以获得进一步的帮助。