Certificate issues across browsers since yesterday (Sep 30th 2021)

Discussion in 'Windows 7' started by jim_p, Oct 1, 2021.

  1. jim_p

    jim_p MDL Senior Member

    Dec 11, 2013
    428
    165
    10
  2. AveYo

    AveYo MDL Expert

    Feb 10, 2009
    1,836
    5,685
    60
    #2 AveYo, Oct 1, 2021
    Last edited: Oct 1, 2021
    Lets Encrypt certificate fix for old OS.reg
    Code:
    Windows Registry Editor Version 5.00
    
    ; a non-convoluted fix for Let's Encrypt certificate f**kup by AveYo
    ; should work instantly, just restart your browser (tested in vanilla windows 7 sp1 with ie8 so it should be fine elsewere)
    
    ; Tho generally, these things are meant to be convoluted, for you to manually do the work of importing a new certificate,
    ; checking if it's digitally signed and valid, all that jazz
    ; Make a habit of familiarizing yourself with these things, it's not rocket science.
    ; The alternative is to trust people on the internet. For example, the below certificate,
    ; while being a verbatim export of isrg-root-x1-cross-signed.der, could very well be modified by a malicious actor
                                                                                                                                                                                                                                      
    ; remove expired certificate (admin)
    [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates\48504E974C0DAC5B5CD476C8202274B24C8C7172]
    
    ; remove expired certificate (system)
    [-HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates\48504E974C0DAC5B5CD476C8202274B24C8C7172]
    
    ; import ISRG Root X1 cert cross signed (issued) by DST Root CA = Chain 2 (legacy) workaround for old OS
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\CABD2A79A1076A31F21D253635CB039D4329A5E8]
    "Blob"=hex:5c,00,00,00,01,00,00,00,04,00,00,00,00,10,00,00,19,00,00,00,01,00,\
      00,00,10,00,00,00,2f,e1,f7,0b,b0,5d,7c,92,33,5b,c5,e0,5b,98,4d,a6,03,00,00,\
      00,01,00,00,00,14,00,00,00,ca,bd,2a,79,a1,07,6a,31,f2,1d,25,36,35,cb,03,9d,\
      43,29,a5,e8,1d,00,00,00,01,00,00,00,10,00,00,00,73,b6,87,61,95,f5,d1,8e,04,\
      85,10,42,2a,ef,04,e3,14,00,00,00,01,00,00,00,14,00,00,00,79,b4,59,e6,7b,b6,\
      e5,e4,01,73,80,08,88,c8,1a,58,f6,e9,9b,6e,09,00,00,00,01,00,00,00,16,00,00,\
      00,30,14,06,08,2b,06,01,05,05,07,03,02,06,08,2b,06,01,05,05,07,03,01,0b,00,\
      00,00,01,00,00,00,1a,00,00,00,49,00,53,00,52,00,47,00,20,00,52,00,6f,00,6f,\
      00,74,00,20,00,58,00,31,00,00,00,62,00,00,00,01,00,00,00,20,00,00,00,96,bc,\
      ec,06,26,49,76,f3,74,60,77,9a,cf,28,c5,a7,cf,e8,a3,c0,aa,e1,1a,8f,fc,ee,05,\
      c0,bd,df,08,c6,0f,00,00,00,01,00,00,00,20,00,00,00,3f,04,11,ed,e9,c4,47,70,\
      57,d5,7e,57,88,3b,1f,20,5b,20,cd,c0,f3,26,31,29,b1,ee,02,69,a2,67,8f,63,04,\
      00,00,00,01,00,00,00,10,00,00,00,0c,d2,f9,e0,da,17,73,e9,ed,86,4d,a5,e3,70,\
      e7,4e,20,00,00,00,01,00,00,00,6f,05,00,00,30,82,05,6b,30,82,03,53,a0,03,02,\
      01,02,02,11,00,82,10,cf,b0,d2,40,e3,59,44,63,e0,bb,63,82,8b,00,30,0d,06,09,\
      2a,86,48,86,f7,0d,01,01,0b,05,00,30,4f,31,0b,30,09,06,03,55,04,06,13,02,55,\
      53,31,29,30,27,06,03,55,04,0a,13,20,49,6e,74,65,72,6e,65,74,20,53,65,63,75,\
      72,69,74,79,20,52,65,73,65,61,72,63,68,20,47,72,6f,75,70,31,15,30,13,06,03,\
      55,04,03,13,0c,49,53,52,47,20,52,6f,6f,74,20,58,31,30,1e,17,0d,31,35,30,36,\
      30,34,31,31,30,34,33,38,5a,17,0d,33,35,30,36,30,34,31,31,30,34,33,38,5a,30,\
      4f,31,0b,30,09,06,03,55,04,06,13,02,55,53,31,29,30,27,06,03,55,04,0a,13,20,\
      49,6e,74,65,72,6e,65,74,20,53,65,63,75,72,69,74,79,20,52,65,73,65,61,72,63,\
      68,20,47,72,6f,75,70,31,15,30,13,06,03,55,04,03,13,0c,49,53,52,47,20,52,6f,\
      6f,74,20,58,31,30,82,02,22,30,0d,06,09,2a,86,48,86,f7,0d,01,01,01,05,00,03,\
      82,02,0f,00,30,82,02,0a,02,82,02,01,00,ad,e8,24,73,f4,14,37,f3,9b,9e,2b,57,\
      28,1c,87,be,dc,b7,df,38,90,8c,6e,3c,e6,57,a0,78,f7,75,c2,a2,fe,f5,6a,6e,f6,\
      00,4f,28,db,de,68,86,6c,44,93,b6,b1,63,fd,14,12,6b,bf,1f,d2,ea,31,9b,21,7e,\
      d1,33,3c,ba,48,f5,dd,79,df,b3,b8,ff,12,f1,21,9a,4b,c1,8a,86,71,69,4a,66,66,\
      6c,8f,7e,3c,70,bf,ad,29,22,06,f3,e4,c0,e6,80,ae,e2,4b,8f,b7,99,7e,94,03,9f,\
      d3,47,97,7c,99,48,23,53,e8,38,ae,4f,0a,6f,83,2e,d1,49,57,8c,80,74,b6,da,2f,\
      d0,38,8d,7b,03,70,21,1b,75,f2,30,3c,fa,8f,ae,dd,da,63,ab,eb,16,4f,c2,8e,11,\
      4b,7e,cf,0b,e8,ff,b5,77,2e,f4,b2,7b,4a,e0,4c,12,25,0c,70,8d,03,29,a0,e1,53,\
      24,ec,13,d9,ee,19,bf,10,b3,4a,8c,3f,89,a3,61,51,de,ac,87,07,94,f4,63,71,ec,\
      2e,e2,6f,5b,98,81,e1,89,5c,34,79,6c,76,ef,3b,90,62,79,e6,db,a4,9a,2f,26,c5,\
      d0,10,e1,0e,de,d9,10,8e,16,fb,b7,f7,a8,f7,c7,e5,02,07,98,8f,36,08,95,e7,e2,\
      37,96,0d,36,75,9e,fb,0e,72,b1,1d,9b,bc,03,f9,49,05,d8,81,dd,05,b4,2a,d6,41,\
      e9,ac,01,76,95,0a,0f,d8,df,d5,bd,12,1f,35,2f,28,17,6c,d2,98,c1,a8,09,64,77,\
      6e,47,37,ba,ce,ac,59,5e,68,9d,7f,72,d6,89,c5,06,41,29,3e,59,3e,dd,26,f5,24,\
      c9,11,a7,5a,a3,4c,40,1f,46,a1,99,b5,a7,3a,51,6e,86,3b,9e,7d,72,a7,12,05,78,\
      59,ed,3e,51,78,15,0b,03,8f,8d,d0,2f,05,b2,3e,7b,4a,1c,4b,73,05,12,fc,c6,ea,\
      e0,50,13,7c,43,93,74,b3,ca,74,e7,8e,1f,01,08,d0,30,d4,5b,71,36,b4,07,ba,c1,\
      30,30,5c,48,b7,82,3b,98,a6,7d,60,8a,a2,a3,29,82,cc,ba,bd,83,04,1b,a2,83,03,\
      41,a1,d6,05,f1,1b,c2,b6,f0,a8,7c,86,3b,46,a8,48,2a,88,dc,76,9a,76,bf,1f,6a,\
      a5,3d,19,8f,eb,38,f3,64,de,c8,2b,0d,0a,28,ff,f7,db,e2,15,42,d4,22,d0,27,5d,\
      e1,79,fe,18,e7,70,88,ad,4e,e6,d9,8b,3a,c6,dd,27,51,6e,ff,bc,64,f5,33,43,4f,\
      02,03,01,00,01,a3,42,30,40,30,0e,06,03,55,1d,0f,01,01,ff,04,04,03,02,01,06,\
      30,0f,06,03,55,1d,13,01,01,ff,04,05,30,03,01,01,ff,30,1d,06,03,55,1d,0e,04,\
      16,04,14,79,b4,59,e6,7b,b6,e5,e4,01,73,80,08,88,c8,1a,58,f6,e9,9b,6e,30,0d,\
      06,09,2a,86,48,86,f7,0d,01,01,0b,05,00,03,82,02,01,00,55,1f,58,a9,bc,b2,a8,\
      50,d0,0c,b1,d8,1a,69,20,27,29,08,ac,61,75,5c,8a,6e,f8,82,e5,69,2f,d5,f6,56,\
      4b,b9,b8,73,10,59,d3,21,97,7e,e7,4c,71,fb,b2,d2,60,ad,39,a8,0b,ea,17,21,56,\
      85,f1,50,0e,59,eb,ce,e0,59,e9,ba,c9,15,ef,86,9d,8f,84,80,f6,e4,e9,91,90,dc,\
      17,9b,62,1b,45,f0,66,95,d2,7c,6f,c2,ea,3b,ef,1f,cf,cb,d6,ae,27,f1,a9,b0,c8,\
      ae,fd,7d,7e,9a,fa,22,04,eb,ff,d9,7f,ea,91,2b,22,b1,17,0e,8f,f2,8a,34,5b,58,\
      d8,fc,01,c9,54,b9,b8,26,cc,8a,88,33,89,4c,2d,84,3c,82,df,ee,96,57,05,ba,2c,\
      bb,f7,c4,b7,c7,4e,3b,82,be,31,c8,22,73,73,92,d1,c2,80,a4,39,39,10,33,23,82,\
      4c,3c,9f,86,b2,55,98,1d,be,29,86,8c,22,9b,9e,e2,6b,3b,57,3a,82,70,4d,dc,09,\
      c7,89,cb,0a,07,4d,6c,e8,5d,8e,c9,ef,ce,ab,c7,bb,b5,2b,4e,45,d6,4a,d0,26,cc,\
      e5,72,ca,08,6a,a5,95,e3,15,a1,f7,a4,ed,c9,2c,5f,a5,fb,ff,ac,28,02,2e,be,d7,\
      7b,bb,e3,71,7b,90,16,d3,07,5e,46,53,7c,37,07,42,8c,d3,c4,96,9c,d5,99,b5,2a,\
      e0,95,1a,80,48,ae,4c,39,07,ce,cc,47,a4,52,95,2b,ba,b8,fb,ad,d2,33,53,7d,e5,\
      1d,4d,6d,d5,a1,b1,c7,42,6f,e6,40,27,35,5c,a3,28,b7,07,8d,e7,8d,33,90,e7,23,\
      9f,fb,50,9c,79,6c,46,d5,b4,15,b3,96,6e,7e,9b,0c,96,3a,b8,52,2d,3f,d6,5b,e1,\
      fb,08,c2,84,fe,24,a8,a3,89,da,ac,6a,e1,18,2a,b1,a8,43,61,5b,d3,1f,dc,3b,8d,\
      76,f2,2d,e8,8d,75,df,17,33,6c,3d,53,fb,7b,cb,41,5f,ff,dc,a2,d0,61,38,e1,96,\
      b8,ac,5d,8b,37,d7,75,d5,33,c0,99,11,ae,9d,41,c1,72,75,84,be,02,41,42,5f,67,\
      24,48,94,d1,9b,27,be,07,3f,b9,b8,4f,81,74,51,e1,7a,b7,ed,9d,23,e2,be,e0,d5,\
      28,04,13,3c,31,03,9e,dd,7a,6c,8f,c6,07,18,c6,7f,de,47,8e,3f,28,9e,04,06,cf,\
      a5,54,34,77,bd,ec,89,9b,e9,17,43,df,5b,db,5f,fe,8e,1e,57,a2,cd,40,9d,7e,62,\
      22,da,de,18,27
    
    Just save as reg (also attached) and double-click to import.
    Tho generally, these things are meant to be convoluted, for you to manually do the work of importing a new certificate, checking if it's digitally signed and valid, all that jazz
    Make a habit of familiarizing yourself with these things, it's not rocket science.
    The alternative is to trust people on the internet. For example, the above certificate, while being a verbatim export of isrg-root-x1-cross-signed.der, could very well be modified by a malicious actor.
    [edit: added above disclaimer to the reg file as well]
     

    Attached Files:

    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  3. jim_p

    jim_p MDL Senior Member

    Dec 11, 2013
    428
    165
    10
    I have NO WORDS to thank you! It will be extensively tested in the following days, in case more complaints emerge.
     
  4. bear_aussie

    bear_aussie MDL Senior Member

    Jun 8, 2015
    271
    292
    10
    i always wondered if u could fiddle the windos cert store from regedit

    tanks @BAU :D
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...