"Your connection is not private..." for your cert (Chrome 57.0.2987.98 (64-bit))

[ludinom]

Hi,

I tried to navigate to https://www.scootersoftware.com/ today on Google Chrome 57.0.2987.98 (64-bit). I got the message:

Your connection is not private

Attackers might be trying to steal your information from www.scootersoftware.com (for example, passwords, messages, or credit cards). NET::ERR_CERT_COMMON_NAME_INVALID

This server could not prove that it is www.scootersoftware.com; its security certificate is from secure.scootersoftware.com. This may be caused by a misconfiguration or an attacker intercepting your connection. Learn more <https://support.google.com/chrome/answer/6098869>.

I don't get this error in Firefox 52.0.

Is there a problem with your certificate? With Chrome? With my setup? Thanks for any help you can provide.

Thanks,
Ludinom

[Aaron]

I just tested with this version, but I'm not seeing the same error as you. If you click the green Scooter Software, Inc [US] text in the path, and click on the blue Cookies link, and clear out any/all cookies being used, and restart Chrome, does this help?

[ludinom]

&quot;Your connection is not private...&quot; for your cert (Chrome 57.0.2987.98 (64-bit))

Aaron,

Thanks for the quick response.

I found what you mean, and it appears to have worked. See thumbnail below; I can't seem to get the hang of posting screenshots inline.

However, when I try to reload a tab with the error, or start a new tab and go to the site, or restart Chrome and try these same things, I still get the error.

Regards,
Matthew

I just tested with this version, but I'm not seeing the same error as you. If you click the green Scooter Software, Inc [US] text in the path, and click on the blue Cookies link, and clear out any/all cookies being used, and restart Chrome, does this help?

[dempson]

I don't get this error in Firefox 52.0.

I do, with Firefox 52.0 (32-bit).

If I visit either of these domains with HTTPS:

https://scootersoftware.com
https://www.scootersoftware.com

I get a page which says (in this case for www.scootersoftware.com):

Your connection is not secure

The owner of www.scootersoftware.com has configured their website improperly. To protect your information from being stolen, Firefox has not connected to this website.

Clicking the Advanced button reveals:

www.scootersoftware.com uses an invalid security certificate.

The certificate is only valid for the following names:
secure.scootersoftware.com, www.secure.scootersoftware.com

Error code: SSL_ERROR_BAD_CERT_DOMAIN

There is no error if I directly visit https://www.secure.scootersoftware.com or https://secure.scootersoftware.com

[Aaron]

Hello,

Ahh, sorry about that. I missed the "s" in https://

While we have a certificate, we do not use it for the landing page. You would want to use the regular http://www.scootersoftware.com, and when visiting the purchase page to process a Cart or similar, the links will redirect to https://secure.scootersoftware.com as needed.

[ludinom]

&quot;Your connection is not private...&quot; for your cert (Chrome 57.0.2987.98 (64-bit))

Aaron,

Thank you, that probably explains the issue.

However, please be aware that when I Google "Scooter Software", I get:

Scooter Software: Home of Beyond Compare
https://www.scootersoftware.com/
Scooter software's Beyond Compare is a Windows utility that combines directory compare and file compare functions in one package. Use it to manage source ...
You've visited this page many times. Last visit: 3/13/17

That is, they direct me to an address for which you apparently don't have a certificate. I believe that it is Google's policy to always favor HTTPS addresses.

Therefore, I would strongly suggest that you get a certificate/update your current certificate/change your configuration/whatever to include https://www.scootersoftware.com/.

You could seriously be losing money over this. Do you have any insight into how many people try to go to https://www.scootersoftware.com/ and turn back because of the warning?

It is in my selfish interest to see you succeed, because I love your product (initially I used it at work, I believe Tandem Computers (RIP), and then bought it myself in 2014) and I want your outstanding customer support to continue.

Regards,
Ludinom

Hello,

Ahh, sorry about that. I missed the "s" in https://

While we have a certificate, we do not use it for the landing page. You would want to use the regular http://www.scootersoftware.com, and when visiting the purchase page to process a Cart or similar, the links will redirect to https://secure.scootersoftware.com as needed.

[Chris]

Thank you for the feedback. I just ordered a new EV SSL certificate for www.scootersoftware.com, we'll be migrating our site over from the secure.scootersoftware.com URL soon.

[ludinom]

Chris,

Glad to hear it! Hope it helps!

Regards,
Ludinom

[Chris]

The SSL issue is now fixed. Our main site certificate now matches www.scootersoftware.com, if you use the old secure.scootersoftware.com address it will redirect to www.