Revocation information for the security certificate for this site is not available

[CheeseDog]

Bit of an odd one here

 

 

On all of my PCs on the domain (including the server) I have the above alert appear when using IE11 for pretty much any site.

 

Another symptom I have is remote desktop also takes ages to connect just after you enter the password.

 

Stand alone machine aren't affected and machines that I've rebuilt also don't have the issue.

 

If I take an affected machine home it still experiences the issue so I don't think it is anything to do with our ISP however, we've recently changed ISP and I noticed yesterday that I'd forgot to change the proxy settings in WSUS (not sure if this is relevant but if it is I'm assuming the problem might eventually fix itself?)

 

Tried resetting caches/clearing SSL state running some MS fixes on test machines and the problem still remains. Turning off the checks in IE also doesn't work

 

I've got to the point now where I'm happy to re-image all the clients but it would be nice to sort the problem out on the server.

 

Open to any other ideas here

 

Thanks

[Willott]

If you view the certificate what's the hierarchy like? Is the CA trusted (are you doing SSL interception somewhere and certificate not installed?)

[CheeseDog]

 

Here's a picture installing the certificate makes no difference at all.

 

Don't think any SSL interception going on will make a difference to this issue as I still get the problem at home, also the "new" machines on the domain (re-imaged on Friday) also don't get this issue. So I'm 100% sure the problem is on the affected machine

 

Also worth saying it's almost any site not just Globalsign certificates

Edited December 13, 2016 by CheeseDog

[Willott]

Ah, yeah, brain didn't process the whole at home bit. If you run procmon, do you see the relevant network calls out to the CRLs? Do CRLs resolve correctly in DNS (thinking possibly hosts files)?

[CheeseDog]

Good idea Willott I'll give it a go tomorrow. Our Christmas fair is this afternoon so I'm spending the afternoon locking stuff away and playing DJ

[CheeseDog]

Nothing's jumping out at me

 

What do you reckon the odds are of the newly imaged machines going wrong after Christmas or everything else resolving itself