Solved Paypal security certificate error

[urbanspaceman1]

I tried searching this forum (and others) but didn't find anything - so here goes:
I logged into my PayPal account (IE10) without any trouble but when I attempted to navigate its site I received security certificate error warnings.
I contacted PayPal who told me to change my cookie setting to 'accept all cookies'.
I didn't believe it, but I tried anyway and was not surprised when it didn't fix the problem. Any advice folks?
BTW. I've never had this problem in the past.

 

[Northernsoul55]

Hi,
Might be a long shot but is the date and time set correctly on your computer?
Usually the reasons for your issue are:

1. Your Computer’s date is set to a wrong value
2. The Security Certificate has really expired
3. The web-site is not trustable.

:ar: How to change date and time

Hope this helps a bit.

cheers

Dave

 

[urbanspaceman1]

Hello Dave. A fellow Geordie, well, well, well! The time and date are correct, but I take your point.
I responded to PayPal's suggestion I change my cookie settings with a suitably sharp retort that has brought no reply thus far.
PayPal is a bank - a big bank - and has, to date, only let me down once some years back, but let's face it, when Microsoft tells us it's not safe, who do we believe?
The only thing I have changed recently is Java - which I updated, so I'm reluctant to accept the problem lies with me. Regards, Keith.

 

[urbanspaceman1]

Thank you for contacting PayPal regarding a 'security certificate error'.
A security certificate error is returned by the browser on a PC when the setting for processing the security certificate recognises it as a threat. The PayPal website at www.paypal.co.uk is not a security threat and we are not getting calls on this issue which would occur if the issue was with our website. You will need to change the settings on the program bringing up the error message to reflect PayPal is not in fact a threat. This has nothing to do with the security of PayPal or the security of transactions made on PayPal but has to do with the functionality of the browser on your PC. You will need to contact the browser provider if you have problems setting the browser to accept the certificate.
I agree it would be worrying if PayPal really did have a security certificate that had expired. The reality is that we don't.
It is my pleasure to assist you. Thank you for choosing PayPal.

 

[Northernsoul55]

hi,

Yup, Geordie born and bred

Have you checked Windows Updates?
There might be an update for your root certificates available?

Try to update the certificate:

1. Click the “Start” button on the Windows task bar and right-click “Internet Explorer” in the menu that appears. Click “Run as Administrator” in the menu that appears.

2. Type the address of the website that displays the certificate error into the address bar near the top of the Windows Internet Explorer browser window. Tap the “Enter” key to connect to the website. If the certificate error still appears, proceed to the next step.

3. Click “Continue to the website (not recommended)” in the message box that appears. Click the “Certificate Error” button.
Click “View Certificates” in the window that appears. Click the “Install Certificate” button. Click “Yes” to confirm that you wish to install the certificate.

4. Connect to the website through Internet Explorer to verify that the issue is resolved.

Have you checked for virus/malware issues? Sometimes this issue occurs after/if you have been infected by malware and viruses?

:ar: http://www.sevenforums.com/tutorials/166445-windows-defender-offline.html
:ar: http://support.kaspersky.com/5350?vs=s88446#s88446

And for malware:


Download

   Note

Do not start the free trial of Malware Bytes, deselect that option when prompted.

Run a full scan once downloaded, installed and updated.

cheers

Dave

 

[urbanspaceman1]

Thanks again Dave. I did all you suggested except for the virus scan: I use KIS 13 and ran a full scan when this problem occurred. I did download, update and run MB which found 18 objects, although how many of them were actually toxic was beyond me so I let MB disinfect them all. Problem's still there unfortunately. Curiously, it doesn't occur on any other secure sites. I say curious but dammed suspicious is nearer the mark. Oh well, I'll keep rooting around. Thanks again, enjoy the sunshine. Keith.

 

[urbanspaceman1]

BTW I put all the MB removal stuff back when it didn't fix the problem as I can't be sure everything was toxic.

 

[Northernsoul55]

Ok, but I would suggest running the virus scans
and I will throw in a few more suggestions to boot

Maybe its a browser setting or add-on, you could try to reset your Internet explorer.

:ar: Reset Internet Explorer

1. Did you have any issues with the site before IE10?
2. Try uninstalling Java, see if issue remains, if it does then reinstall?
3. Can you not carry out a System restore back to before the issue occurred?

Paypal's site checks out as the Security Cert being up-to-date:

:ar: http://www.digicert.com/help/

Were you unable to update you certificate for Paypal? What was the outcome?

Cheers

Dave

 

[urbanspaceman1]

Hi Dave. I ran a full scan with KIS 13 as soon as I saw this problem.
I did go through the certificate update procedure successfully.
I don't know when this began because I never normally search within my PayPal account; it may have been years since I last did it.
As I said, no other banking sites appear to have any problems.
I definitely can't do a system restore back that far: 48hrs max.
I am very suspicious of Java. I did an upgrade recently and was unable to use the 'Verify' tool. I uninstalled Java earlier today and used the offline install option which loaded fine. I went to 'check for updates' and it came back and said it was the latest version, then about 30 seconds after I closed it down I got a triangular yellow security banner telling me the website was not secure and did I want to continue or disconnect. There was no apparent indication that I was connected to anything. I've got a feeling there is something nasty in my system. I've scanned the java offline download and it is safe according to KAS. Got a feeling something is wrong though.

 

[Northernsoul55]

Try those virus scanners i linked you to, as virus is a possibility.

 

[Golden]

Can I make a suggestion? Check that the PayPal site you see is not a spoofed site due to malware on your system.

Do this to verify the PayPal site unique fingerprint:

1. In IE, on the main PayPal page, click the padlock.



2. Now click 'View Certificates'

3. In the panel that opens, click the 'Details' tab. Scroll to the bottom and click Thumbprint. Compare the thumbprint code to the unique fingerprint (thumbprint) code of the authentic PayPal site as provided on Steve Gibson's site.



This is the fingerprint of the authentic PayPal site:

21:77:48:25:DC:4A:9C:54:CE:02:B0:70:92:8A:2E:72:CE:58:78:E7

If your panel thumbprint in step 3 matches this code exactly , then the PayPal site you are connecting to is authentic.

 

[Northernsoul55]

Of course you can, and a very good suggestion it is too

 

[urbanspaceman1]

Ok Folks. Here's the thing: I tried disabling Java (I'm still suspicious) but that didn't work either. I ramped-up the settings for a full KIS scan (I didn't know default was not the highest) and left it alone while it scanned just under 1,000,000 files. Nothing! Dave, you suggested Windows Defender Offline as a virus scan, do you think it is worth trying that when KIS found nothing and all of the following applies?
I tried the above from Golden (thank-You) and the codes don't match. This was what I got:
e3 ac 7c b1 69 30 59 63 a6 66 7c d4 b4 55 6e 41 6a 34 cd 5c
as you can see, it bears no resemblance to the thumb you sent me. However, in order to log onto PayPal I need a code texted to my mobile that only lasts one minute. I have also received three emails from PayPal (one of which is included above) plus, it is only when I look at my transactions that the error screen appears, everything else on the account page opens up fine. So, I really don't know why those codes don't match because everything about the site appears kosher to me.

 

[urbanspaceman1]

I've been trying to access 'My Profile' on the main account page and I cannot. Something dawned on me: my account is an American account opened many years ago in US$; I wonder if I am split between two locations and the American site has a different code.

 

[Northernsoul55]

Ok I just ran Goldens suggestion above and my codes matched exactly.

If yours doesnt match then it looks like your paypal site could be "spoofed" as Golden put it, due
to Malware!!

I would run MalwareBytes again, making sure you have the latest version installed and fully updated,
then perform a full scan. Quarantine anything it finds.

Yes I think you should run WDO it wont harm.

Question:I find it strange that you need a code text to your mobile? Unless thats added security?
I can log onto my Paypal with just my Username and password, Im a tad baffled?

cheers

Dave

 

[Northernsoul55]

I've been trying to access 'My Profile' on the main account page and I cannot. Something dawned on me: my account is an American account opened many years ago in US$; I wonder if I am split between two locations and the American site has a different code.

This site matches the codes for me, try it:

:ar: https://www.paypal.com/uk/webapps/mpp/home

cheers

Dave

 

[urbanspaceman1]

I logged on to your link and looked at the code and it is the same one I always get and not Steve Gibbon's.
Also, when I log out and the site tries to re-direct me to the open Home-page the error warning comes up again.
The SMS text to my phone has been in place for quite a few years as a security failsafe. As I said, the code sent only lives for 60 seconds. I've sent another email to the PayPal guy who sent me that last response I posted.
Something very strange is going on; the more I confirm my own computer's security the stranger it all becomes.

 

[Northernsoul55]

I agree, but sercurity could be compromised due to malware/virus.

Run the tests and see what the results are...should be interesting.

 

[urbanspaceman1]

I've just logged onto my PayPal account using my tablet and received my SMS as normal and didn't find the fault; everything on the page worked fine so there is something nasty on my computer. I'll run WDO but the updated MB didn't fix it yesterday so I don't think it will do any good.

 

[Layback Bear]

A couple programs I use that help also.

Downloading AdwCleaner

http://www.eset.com/us/online-scanner/