FIX: Certificate error when you try to visit an SSL Web site by using Internet Explorer 7: "There is a problem with this website's security certificate"

Article ID: 954312 - View products that this article applies to.
Support for Windows Vista Service Pack 1 (SP1) ends on July 12, 2011. To continue receiving security updates for Windows, make sure you're running Windows Vista with Service Pack 2 (SP2). For more information, refer to this Microsoft web page: Support is ending for some versions of Windows
(http://windows.microsoft.com/en-us/windows/help/end-support-windows-xp-sp2-windows-vista-without-service-packs)
.
Expand all | Collapse all

On This Page

SYMPTOMS

Consider the following scenario:
  • In a network environment, you are running Windows Internet Explorer 7 on a Windows Vista Service Pack 1 (SP1)-based computer or on a Windows Server 2008-based computer.
  • You configure the following Group Policy settings for Internet Explorer:
    • You enable the "Locked-Down Local Machine Zone Template" policy.
    • You disable the "Web sites in less privileged Web content zones can navigate into this zone" policy.
  • You try to visit a Secure Sockets Layer (SSL) Web site by using Internet Explorer 7 on the computer on which you applied these Group Policy settings.
In this scenario, the following certificate error Web page is displayed:
There is a problem with this website's security certificate.
Security certificate problems may indicate an attempt to fool you or intercept any data you send to the server.
We recommend that you close this webpage and do not continue to this website.
Click here to close this webpage.
Continue to this website (not recommended) .
More information
If you arrived at this page by clicking a link, check the website address in the address bar to be sure that it is the address you were expecting. When going to a website with an address such as https://example.com, try adding the 'www' to the address, https://www.example.com. If you choose to ignore this error and continue, do not enter private information into the website. For more information, see "Certificate Errors" in Internet Explorer Help.
After you click Continue to this website (not recommended), nothing happens.

This issue occurs if the SSL Web site that you try to visit is located in a zone that has more restricted permissions than the Internet zone, such as an intranet zone.
Back to the top | Give Feedback

RESOLUTION

Windows Vista Service Pack 1 and Windows Server 2008 hotfix information

A supported hotfix is now available from Microsoft. However, it is intended to correct only the problem that is described in this article. Apply it only to systems that are experiencing this specific problem. This hotfix may receive additional testing. Therefore, if you are not severely affected by this problem, we recommend that you wait for the next service pack that contains this hotfix.

To resolve this problem immediately, contact Microsoft Customer Support Services to obtain the hotfix. For a complete list of Microsoft Customer Support Services telephone numbers and information about support costs, visit the following Microsoft Web site:
http://support.microsoft.com/contactus/?ws=support
(http://support.microsoft.com/contactus/?ws=support)
Note In special cases, charges that are ordinarily incurred for support calls may be canceled if a Microsoft Support Professional determines that a specific update will resolve your problem. The usual support costs will apply to additional support questions and issues that do not qualify for the specific update in question.

Important Windows Vista and Windows Server 2008 hotfixes are included in the same packages. However, only one of these products may be listed on the “Hotfix Request” page. To request the hotfix package that applies to both Windows Vista and Windows Server 2008, just select the product that is listed on the page.

Prerequisites

There are no prerequisites.

Restart requirement

You must restart the computer after you apply this hotfix.

Hotfix replacement information

This hotfix does not replace any other hotfixes.

Registry information

Important This section, method, or task contains steps that tell you how to modify the registry. However, serious problems might occur if you modify the registry incorrectly. Therefore, make sure that you follow these steps carefully. For added protection, back up the registry before you modify it. Then, you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, click the following article number to view the article in the Microsoft Knowledge Base:
322756
(http://support.microsoft.com/kb/322756/ )
How to back up and restore the registry in Windows
To enable this hotfix after installation, follow these steps:
  1. Click Start , type regedit in the Start Search box, and then press ENTER.
  2. Locate and then click the following registry subkey:
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl
  3. On the Edit menu, point to New , and then click Key.
  4. Type the following key name, and then press ENTER:
    FEATURE_ERROR_PAGE_BYPASS_ZONE_CHECK_FOR_HTTPS_KB954312
  5. On the Edit menu, point to New , and then click DWORD Value.
  6. Type iexplore.exe , and then press ENTER.
  7. On the Edit menu, click Modify.
  8. Type 1 , and then click OK.
  9. Exit Registry Editor.

File information

The English version of this hotfix has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time item in Control Panel.

Windows Vista and Windows Server 2008 file information notes

  • The files that apply to a specific product, milestone (RTM, SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table.
    Collapse this tableExpand this table
    VersionProductMilestoneService branch
    6.0.600 0 . 16xxxWindows VistaRTMGDR
    6.0.600 0 . 20xxxWindows VistaRTMLDR
    6.0.600 1 . 18xxxWindows Vista SP1 and Windows Server 2008 SP1SP1GDR
    6.0.600 1 . 22xxxWindows Vista SP1 and Windows Server 2008 SP1SP1LDR
  • Service Pack 1 is integrated into Windows Server 2008.
  • The .manifest and .mum files that are installed for each environment are listed separately. The .mum and .manifest files, and the associated security catalog (.cat) files, are critical to maintaining the state of the updated component. The security catalog files (attributes not listed) are signed with a Microsoft digital signature.

For all supported 32-bit versions of Windows Server 2008 and of Windows Vista

Collapse this tableExpand this table
File nameFile versionFile sizeDateTimePlatform
Mshtml.dll7.0.6001.222213,578,88012-Jul-200801:09x86
Mshtml.tlb7.0.6001.222211,383,42411-Jul-200823:00Not Applicable

For all supported 64-bit versions of Windows Server 2008 and of Windows Vista

Collapse this tableExpand this table
File nameFile versionFile sizeDateTimePlatform
Mshtml.dll7.0.6001.222215,677,05612-Jul-200801:45x64
Mshtml.tlb7.0.6001.222211,383,42411-Jul-200823:40Not Applicable

For all supported Itanium-based versions of Windows Server 2008

Collapse this tableExpand this table
File nameFile versionFile sizeDateTimePlatform
Mshtml.dll7.0.6001.2222110,062,84812-Jul-200801:26IA-64
Mshtml.tlb7.0.6001.222211,383,42411-Jul-200823:25Not Applicable
Back to the top | Give Feedback

REFERENCES

For more information, click the following article number to view the article in the Microsoft Knowledge Base:
950067
(http://support.microsoft.com/kb/950067/ )
Certificate error Web page is displayed when you try to visit an SSL Web site by using Internet Explorer 7: "There is a problem with this website's security certificate"
Back to the top | Give Feedback

MORE INFORMATION

Additional file information for Windows Server 2008 and for Windows Vista

Additional files for all supported 32-bit versions of Windows Server 2008 and of Windows Vista

Collapse this tableExpand this table
File namePackage_for_kb954312_client_1~31bf3856ad364e35~x86~~6.0.1.0.mum
File versionNot Applicable
File size1,367
Date (UTC)13-Jul-2008
Time (UTC)18:01
File namePackage_for_kb954312_client~31bf3856ad364e35~x86~~6.0.1.0.mum
File versionNot Applicable
File size1,430
Date (UTC)13-Jul-2008
Time (UTC)18:01
File namePackage_for_kb954312_server_0~31bf3856ad364e35~x86~~6.0.1.0.mum
File versionNot Applicable
File size1,425
Date (UTC)13-Jul-2008
Time (UTC)18:01
File namePackage_for_kb954312_server~31bf3856ad364e35~x86~~6.0.1.0.mum
File versionNot Applicable
File size1,430
Date (UTC)13-Jul-2008
Time (UTC)18:01
File nameX86_3adc02f2cff312dbec75e4532179c27b_31bf3856ad364e35_6.0.6001.22221_none_deec21ec25237bdf.manifest
File versionNot Applicable
File size704
Date (UTC)13-Jul-2008
Time (UTC)18:01
File nameX86_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_6.0.6001.22221_none_13b811bf3b566946.manifest
File versionNot Applicable
File size840,275
Date (UTC)12-Jul-2008
Time (UTC)01:50

Additional files for all supported 64-bit versions of Windows Server 2008 and of Windows Vista

Collapse this tableExpand this table
File nameAmd64_acf199e83945a6d58f16fc02d66069f8_31bf3856ad364e35_6.0.6001.22221_none_2f89bf440c71b005.manifest
File versionNot Applicable
File size1,056
Date (UTC)13-Jul-2008
Time (UTC)18:01
File nameAmd64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_6.0.6001.22221_none_6fd6ad42f3b3da7c.manifest
File versionNot Applicable
File size840,336
Date (UTC)12-Jul-2008
Time (UTC)02:31
File namePackage_for_kb954312_client_1~31bf3856ad364e35~amd64~~6.0.1.0.mum
File versionNot Applicable
File size1,375
Date (UTC)13-Jul-2008
Time (UTC)18:01
File namePackage_for_kb954312_client~31bf3856ad364e35~amd64~~6.0.1.0.mum
File versionNot Applicable
File size1,438
Date (UTC)13-Jul-2008
Time (UTC)18:01
File namePackage_for_kb954312_server_0~31bf3856ad364e35~amd64~~6.0.1.0.mum
File versionNot Applicable
File size1,433
Date (UTC)13-Jul-2008
Time (UTC)18:01
File namePackage_for_kb954312_server~31bf3856ad364e35~amd64~~6.0.1.0.mum
File versionNot Applicable
File size1,438
Date (UTC)13-Jul-2008
Time (UTC)18:01

Additional files for all supported Itanium-based versions of Windows Server 2008

Collapse this tableExpand this table
File nameIa64_10c209d41887ebc4aa225017661c4e8b_31bf3856ad364e35_6.0.6001.22221_none_8cdd02a458895f86.manifest
File versionNot Applicable
File size1,054
Date (UTC)13-Jul-2008
Time (UTC)18:01
File nameIa64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_6.0.6001.22221_none_13b9b5b53b547242.manifest
File versionNot Applicable
File size840,306
Date (UTC)12-Jul-2008
Time (UTC)02:00
File namePackage_1_for_kb954312~31bf3856ad364e35~ia64~~6.0.1.0.mum
File versionNot Applicable
File size2,016
Date (UTC)13-Jul-2008
Time (UTC)18:01
File namePackage_for_kb954312_server_0~31bf3856ad364e35~ia64~~6.0.1.0.mum
File versionNot Applicable
File size1,429
Date (UTC)13-Jul-2008
Time (UTC)18:01
File namePackage_for_kb954312_server~31bf3856ad364e35~ia64~~6.0.1.0.mum
File versionNot Applicable
File size1,434
Date (UTC)13-Jul-2008
Time (UTC)18:01
Back to the top | Give Feedback

Properties

Article ID: 954312 - Last Review: June 10, 2011 - Revision: 1.2
APPLIES TO
  • Windows Vista Service Pack 1
  • Windows Server 2008 Datacenter without Hyper-V
  • Windows Server 2008 Enterprise without Hyper-V
  • Windows Server 2008 for Itanium-Based Systems
  • Windows Server 2008 Standard without Hyper-V
  • Windows Server 2008 Datacenter
  • Windows Server 2008 Enterprise
  • Windows Server 2008 Standard
Keywords: 
kbhotfixserver kbexpertiseinter kbqfe KB954312
Back to the top | Give Feedback

Give Feedback

 
Back to the topBack to the top