(10-01-2021 04:46 PM)ijabbott Wrote: (10-01-2021 03:40 PM)aurelio Wrote: hpmuseum.org is valid the others are not
R3 is expired or still invalid
the first is expired or still invalid
And it's definitely "ISRG Root X1" at the top? It ought to be trusted by most modern, up-to-date OSes and browsers.
I think the next step is to check the trusted root certification authorities in your browser. On the page Chrome -> Settings -> Privacy and security ->Security (clicking on the link is blocked, but you can cut and paste the URL, or navigate through Chrome's settings manually), click the "Manage certificates" option near the bottom of the page (it is 2nd from the bottom on mine). That opens a dialog box with several tabs.
The "Trusted Root Certification Authorities" tab should include the "ISRG Root X1" certificate issued by itself with an expiry date of 2035-06-04. If it is missing, I guess you could try importing it from a file.
EDIT: The above dialog is actually interacting with Windows' certificate store if running on Windows.
actually at the top, now I see it's different: DST root CA X3, not the "ISRG Root X1" and in the settings, as you described I found that the certificate is expired on 29th