"Connection not secure, Certificate signed by untrusted issuer" being displayed to certain users

[geckogenweb-gmailcom]

Current versus Expected Behavior:

Currently, some users are experiencing a “Your connection to this site is not secure” error when accessing my website, particularly users in California and on a school network. The SSL certificate is showing as signed by an untrusted issuer. The expected behavior is for all users to access the site securely without SSL warnings.

Code, Configuration, and Steps that Reproduce this Issue:

1. Users access the website at https://gecko-gen.com.
2. The browser displays a warning: “Your connection is not private.”
3. Certificate details show:

• Issued by: R11
• Organization: Let’s Encrypt
• The certificate is signed by an untrusted issuer.

Project Information:

• URL: https://gecko-gen.com
• Framework: [Specify your framework if applicable, e.g., Next.js]
• Environment: [Specify environment, e.g., Production]
• Project Settings:
  • DNS Records: CAA records limited to Let’s Encrypt and DigiCert.
  • Nameservers: ns1.vercel-dns.com, ns2.vercel-dns.com
  • SSL Certificates: Auto-renewal enabled, expiring on Feb 02, 2025.
• Git Repo: GitHub - santidevhmo/geckogen-web-app-2024 at SantiWebChanges

This is a screenshot of the browser is displaying the user with the error:

And this is a screenshot to what is displayed on my browser that doesn’t have this error:

[swarnava (Swarnava Sengupta)]

Hi,

Can you confirm if they are accessing your website from a compatible device?

[geckogenweb-gmailcom]

Hii,

The user is using Google Chrome Version 103.0.506 in a 2008 iMac with OS X El Capitan.
I see that the certificate is not compatible with these user specifications.

I’m assuming that to fix this I would have to upgrade the plan and add my own certificate?
Also for the school network problem blocking the site, is this a common problem for Vercel deployments?

[swarnava (Swarnava Sengupta)]

@geckogenweb-gmailcom

I’m assuming that to fix this I would have to upgrade the plan and add my own certificate?

Even if you add your own custom certificate, it’s highly unlikely that you will find a SSL certificate that still supports such an old operating system. I’m assuming the problem here isn’t just with Chrome, but rather with the operating system which has extremely outdated certificates in its trust. It is crucial to ensure that the trusted store has the most recent certificates installed to support modern websites. Some SSL CA providers may still issue these certificates. Please note that custom SSL certificates can only be installed on the Enterprise plan.

@geckogenweb-gmailcom

Also for the school network problem blocking the site, is this a common problem for Vercel deployments?

This is not a common problem for Vercel deployment, but rather for any untrusted website. Corporate firewalls and school or campus networks often restrict traffic only to specific websites to ensure that employees or students don’t visit unsafe websites that are not required to perform their work.

[geckogenweb-gmailcom]

Thank you so much for the help!