站点使用了 ssl 后，用 chrome 无法访问了，用 safari 访问正常，求解

[mhtt]

服务器检查没有问题

DNS resolves 's.domain.com' to （ip）
SSL certificate

Common Name = s.domain.com
Subject Alternative Names = s.domain.com, www.s.domain.com
Issuer = COMODO RSA Domain Validation Secure Server CA
Serial Number = E78D5F18BFCA4F674DB92E0FDA4E031D370
SHA1 Thumbprint = 61010A635E84922318663E30407E7DF8FAC25CF68A00C
Key Length = 2048 bit
Signature algorithm = SHA256 + RSA (excellent)
Secure Renegotiation: Supported
This certificate does not use a vulnerable Debian key (this is good)

SSL Certificate has not been revoked

OCSP Staple:
OCSP Origin:
CRL Status:

SSL Certificate expiration
The certificate expires August 3, 2015 (364 days from today)
Certificate Name matches s.domain.com
Subject s.domain.com
Valid from 03/Aug/2014 to 03/Aug/2015
Issuer COMODO RSA Domain Validation Secure Server CA
SSL Certificate is correctly installed

Congratulations! This certificate is correctly installed.

用safari访问也正常，但用chrome访问就是一个禁止访问的的界面，提示`this certificate was signed by an untrusted issuer`，求解！

[fuxkcsdn]

用的是自签名的证书？？
Windows下需要导入CA证书到受信任的根证书发布机构

[ine181x]

信任链？

[DreaMQ]

地址贴出来试试？

[stevegy]

chrome可能认为COMODO RSA Domain Validation Secure Server CA 是 "this certificate was signed by an untrusted issuer"
更新一下chrome的版本试试，貌似这个CA有点问题。。。https://ssl-tools.net/certificates/135zw4l-comodo-rsa-domain-validation-secure-server
Not valid before:
2014-02-12 00:00­:00 UTC
Not valid after:
2029-02-11 23:59­:59 UTC

2-12才开始有效的。。。

[bigtan]

淘宝上面有七块一张的正儿八经的证书，为什么不使用呢

[mhtt]

@fuxkcsdn
@stevegy namecheap.com上买的9刀一年的证书

[ine181x]

@mhtt 我真心觉得是信任链的问题，你的证书把信任链上游的证书加进来没有？

[Livid]

有可能是 Chrome 版本太旧。

[xdeng]

服务器配置还少了一个文件?

[roychan]

清空缓存…

[mhtt]

@ine181x
@Livid
@xdeng
@roychan 清理了下chrome，问题解决，应该是缓存导致。

[roychan]

@mhtt 所以很多问题没那么复杂…