Paypal security certificate error

urbanspaceman1 · 05 May 2013

I tried searching this forum (and others) but didn't find anything - so here goes:
I logged into my PayPal account (IE10) without any trouble but when I attempted to navigate its site I received security certificate error warnings.
I contacted PayPal who told me to change my cookie setting to 'accept all cookies'.
I didn't believe it, but I tried anyway and was not surprised when it didn't fix the problem. Any advice folks?
BTW. I've never had this problem in the past.

Northernsoul55 · 06 May 2013

Hi,
Might be a long shot but is the date and time set correctly on your computer?
Usually the reasons for your issue are:

Your Computer’s date is set to a wrong value
The Security Certificate has really expired
The web-site is not trustable.

How to change date and time

Hope this helps a bit.

cheers

Dave

urbanspaceman1 · 06 May 2013

Hello Dave. A fellow Geordie, well, well, well! The time and date are correct, but I take your point.
I responded to PayPal's suggestion I change my cookie settings with a suitably sharp retort that has brought no reply thus far.
PayPal is a bank - a big bank - and has, to date, only let me down once some years back, but let's face it, when Microsoft tells us it's not safe, who do we believe?
The only thing I have changed recently is Java - which I updated, so I'm reluctant to accept the problem lies with me. Regards, Keith.

urbanspaceman1 · 06 May 2013

Thank you for contacting PayPal regarding a 'security certificate error'.
A security certificate error is returned by the browser on a PC when the setting for processing the security certificate recognises it as a threat. The PayPal website at www.paypal.co.uk is not a security threat and we are not getting calls on this issue which would occur if the issue was with our website. You will need to change the settings on the program bringing up the error message to reflect PayPal is not in fact a threat. This has nothing to do with the security of PayPal or the security of transactions made on PayPal but has to do with the functionality of the browser on your PC. You will need to contact the browser provider if you have problems setting the browser to accept the certificate.
I agree it would be worrying if PayPal really did have a security certificate that had expired. The reality is that we don't.
It is my pleasure to assist you. Thank you for choosing PayPal.

Northernsoul55 · 06 May 2013

hi,

Yup, Geordie born and bred :)

Have you checked Windows Updates?
There might be an update for your root certificates available?

Try to update the certificate:

1. Click the “Start” button on the Windows task bar and right-click “Internet Explorer” in the menu that appears. Click “Run as Administrator” in the menu that appears.

2. Type the address of the website that displays the certificate error into the address bar near the top of the Windows Internet Explorer browser window. Tap the “Enter” key to connect to the website. If the certificate error still appears, proceed to the next step.

3. Click “Continue to the website (not recommended)” in the message box that appears. Click the “Certificate Error” button.
Click “View Certificates” in the window that appears. Click the “Install Certificate” button. Click “Yes” to confirm that you wish to install the certificate.

4. Connect to the website through Internet Explorer to verify that the issue is resolved.

Have you checked for virus/malware issues? Sometimes this issue occurs after/if you have been infected by malware and viruses?

https://www.sevenforums.com/tutorials/166445-windows-defender-offline.html

http://support.kaspersky.com/5350?vs=s88446#s88446

And for malware:

Download

Note

Do not start the free trial of Malware Bytes, deselect that option when prompted.

Run a full scan once downloaded, installed and updated.

cheers

Dave

urbanspaceman1 · 07 May 2013

Thanks again Dave. I did all you suggested except for the virus scan: I use KIS 13 and ran a full scan when this problem occurred. I did download, update and run MB which found 18 objects, although how many of them were actually toxic was beyond me so I let MB disinfect them all. Problem's still there unfortunately. Curiously, it doesn't occur on any other secure sites. I say curious but dammed suspicious is nearer the mark. Oh well, I'll keep rooting around. Thanks again, enjoy the sunshine. Keith.

urbanspaceman1 · 07 May 2013

BTW I put all the MB removal stuff back when it didn't fix the problem as I can't be sure everything was toxic.

Northernsoul55 · 07 May 2013

Ok, but I would suggest running the virus scans :)
and I will throw in a few more suggestions to boot

Maybe its a browser setting or add-on, you could try to reset your Internet explorer.

Reset Internet Explorer

1. Did you have any issues with the site before IE10?
2. Try uninstalling Java, see if issue remains, if it does then reinstall?
3. Can you not carry out a System restore back to before the issue occurred?

Paypal's site checks out as the Security Cert being up-to-date:

http://www.digicert.com/help/

Were you unable to update you certificate for Paypal? What was the outcome?

Cheers

Dave

urbanspaceman1 · 07 May 2013

Hi Dave. I ran a full scan with KIS 13 as soon as I saw this problem.
I did go through the certificate update procedure successfully.
I don't know when this began because I never normally search within my PayPal account; it may have been years since I last did it.
As I said, no other banking sites appear to have any problems.
I definitely can't do a system restore back that far: 48hrs max.
I am very suspicious of Java. I did an upgrade recently and was unable to use the 'Verify' tool. I uninstalled Java earlier today and used the offline install option which loaded fine. I went to 'check for updates' and it came back and said it was the latest version, then about 30 seconds after I closed it down I got a triangular yellow security banner telling me the website was not secure and did I want to continue or disconnect. There was no apparent indication that I was connected to anything. I've got a feeling there is something nasty in my system. I've scanned the java offline download and it is safe according to KAS. Got a feeling something is wrong though.

Northernsoul55 · 07 May 2013

Try those virus scanners i linked you to, as virus is a possibility.