Non-secure site at checkout?

[MattK]

Hello All,
I have been getting a couple a complaints from my custmers saying that when they checkout, my site is not secure or cannot be verified. I cannot replicate this and was wondering if anyone has any suggestions. I have a verisign certificate. I am afraid I am loosing custmers because of this, but do not know what is wrong or what I should do to correct it.

Site: www.stonehousecollection.com

Thanks
Matt

[ILoveHostasaurus]

You have a Verisign certificate that requires an intermediate certificate to be installed along with it; if you purchased it through your host, have them check their configuration, if you purchased it yourself, you probably didn't provide them with everything that Verisign sent you.

[MattK]

Thanks David. I did purchase it myself, so I guess I will start be calling Verisign and go from there.

Matt

[ILoveHostasaurus]

Yep, ask Verisign to give you the "intermediate certificate" or the "CA certificate" for your SSL and then pass that on to your host, they'll be able to install it so things will start working right; without it, some browsers won't know who the certificate came from, such as FireFox users.

[MattK]

Thanks again David,
I have done what you recommended, but I have no way of knowing if it worked. Can you tell?

Thanks
matt

[ILoveHostasaurus]

Nope, not working yet.

[championcard]

I had this problem too. I found that it was because I had a global footer banner for Link Exchange. The graphics for the link banner is called from outside anyone's website. Only graphics called from within your secure site is looked at as secure by your certificate. With these outside graphics in my cart area, a window always opened to the user stating that the page contains secure and insecure data. I pulled the Link Exchange banner from all pages in my shopping cart and that fixed the problem.

Bill McDonough - ChampionCard.com

[ILoveHostasaurus]

That can cause that too but in this case you can tell it's an intermediate cert issue by opening the cert when the error pops up and you can see the certificate heirarchy starts with the www.stonehousecollection.com cert instead of Verisign.