由GeoTrust SSL证书不起作用

可能的原因是：

1. 客户端的时钟设置不正确。

2. 客户端浏览器没有将CA设置为可信。

3. 证书未正确安装在服务器或相应的私钥未设置。

4. 需要中间证书，但没有正确安装在服务器上。

5. 客户端不试图通过证书中列出的名称访问该站点。

6. 证书被撤销或者是腐败的。

如果您分享url，我们可以立即缩小问题范围。

你可以testing你的证书安装在线sslChecker：

http://www.sslshopper.com/ssl-certificate-tools.html

它会立即告诉你，如果你的CA证书或直接证书有问题。

 but the SSL Certificate seems to be untrusted. What are the possible reasons for that? 

很可能，在证书签名请求中分配的通用名称与您使用cert的主机名称不匹配。 您需要确保这些名称匹配，域名和子域名。 在多个子域中使用相同证书的唯一方法是使用通配符证书。 但是，这通常是与传统证书服务（单域证书）不同的服务。

使用openssl的Apache CSR示例：

 $ openssl req -new -newkey rsa:2048 -nodes -keyout myPrivatekey.key -out mycsr.csr -config openssl.conf Generating a 2048 bit RSA private key .....+++ .....................................+++ writing new private key to 'mykey.key' ----- You are about to be asked to enter information that will be incorporated into your certificate request. What you are about to enter is what is called a Distinguished Name or a DN. There are quite a few fields but you can leave some blank For some fields there will be a default value, If you enter '.', the field will be left blank. ----- Country Name (2 letter code) [AU]:US State or Province Name (full name) [Some-State]:North Carolina Locality Name (eg, city) []:Raleigh Organization Name (eg, company) [Internet Widgits Pty Ltd]:Somebody, Inc. Organizational Unit Name (eg, section) []:IT Common Name (eg, YOUR name) []:test.testdomain.com (MUST MATCH HOST) Email Address []:[email protected] 

然后，您将它发送给您的CA提供商，他们将生成公共证书，根证书和中级证书。 使用由CSR生成的私钥。

Apache httpd.conf设置：

 # Secure (SSL/TLS) connections <IfModule ssl_module> SSLProtocol all SSLCipherSuite HIGH:MEDIUM #CA certificates for root and intermediate SSLCACertificateFile "C:/certs/Geotrust/caroot.crt" SSLCertificateChainFile "C:/certs/Geotrust/caIntermediate.crt" #Generated first via openssl; Server public and private keys. SSLCertificateFile "C:/development/certs/Geotrust/myPublicKey.crt" SSLCertificateKeyFile "C:/development/certs/Geotrust/myPrivatekey.key" </IfModule> <VirtualHost *:443> SSLEngine On DocumentRoot "C:/website" ServerName test.testdomain.com