Check the date and time on your PC and ensure automatic settings are enabled, as incorrect dates can invalidate SSL certificates. 2. Clear browser cache and SSL state in Microsoft Edge through privacy settings and reset network settings to default. 3. Verify Trusted Root Certification Authorities via certmgr.msc and reinstall missing root certificates using certutil commands if necessary. 4. Temporarily disable antivirus or firewall to rule out interference from HTTPS scanning features, then disable or reconfigure those features if needed. 5. Update Windows and browsers to ensure the latest security patches and root certificates are installed. 6. Manually install the certificate only for trusted internal or company sites by accessing the certificate from the browser and adding it to Trusted Root Certification Authorities. Be cautious if the error appears on major websites, as it could indicate a man-in-the-middle attack or malware, in which case you should scan your system with Windows Defender or Malwarebytes. Start with time and cache fixes, as most issues stem from local configuration problems, not the website itself.

The error "The security certificate presented by this website was not issued by a trusted certificate authority" on Windows usually appears in browsers like Microsoft Edge or Internet Explorer when the site’s SSL certificate isn’t trusted by your system. While it can indicate a real security risk (like a malicious site), it often happens due to local issues. Here’s how to fix it:

1. Check the Date and Time on Your PC

An incorrect system date or time can cause certificate errors because SSL certificates are valid only within specific date ranges.

• Right-click the clock in the taskbar → Adjust date/time.
• Turn on Set time automatically and Set time zone automatically.
• Make sure the date, time, and time zone are correct.

? This fixes the issue in many cases, especially after traveling or battery-related clock resets.

2. Clear Browser SSL State and Cache

Browsers cache SSL states, and corrupted entries can trigger false warnings.

In Microsoft Edge:

1. Go to Settings → Privacy, search, and services.
2. Under Clear browsing data, click Choose what to clear.
3. Check:
   • Browsing history
   • Cookies and other site data
   • Cached data and files
4. Click Clear now.
5. Restart the browser.

Also, reset network settings:

• Go to Settings → Reset settings → Restore settings to their default values.

3. Check Trusted Root Certification Authorities

Windows relies on a list of trusted root CAs. If a root certificate is missing or corrupted, you’ll get this error.

To verify:

1. Press Win R, type certmgr.msc, and press Enter.
2. Expand Trusted Root Certification Authorities → Certificates.
3. Look for major CAs like:
   • DigiCert
   • GlobalSign
   • Let's Encrypt
   • GoDaddy

If these are missing, or if the list looks incomplete, you may need to restore them.

Reinstall Trusted Certificates (if needed):

• Download the Microsoft Trusted Root Certificate Program package from Microsoft’s official site.
• Or run:

  certutil -generateSSTFromWU roots.sst
  certutil -addstore -f "Root" roots.sst

  (Run Command Prompt as Administrator.)

4. Disable Antivirus or Firewall Temporarily

Some third-party antivirus programs (like Avast, AVG, or Kaspersky) install their own root certificates to scan encrypted traffic. If misconfigured, they can cause trust issues.

• Temporarily disable your antivirus or firewall.
• Try accessing the site again.
• If it works, go into your antivirus settings and:
  • Disable HTTPS scanning (also called "Web Shield" or "SSL scanning").
  • Or re-install the antivirus with updated certificates.

?? Only disable antivirus temporarily, and avoid sites you don’t trust.

5. Update Windows and Browsers

Outdated systems may lack the latest root certificates or security patches.

• Go to Settings → Update & Security → Windows Update.
• Install all pending updates.
• Also update your browser (Edge, Chrome, etc.).

6. Manually Install the Certificate (Advanced)

If you’re accessing a company or internal site with a self-signed certificate:

1. Go to the website and click Continue to this website (not recommended).
2. Click the lock or certificate error icon in the address bar.
3. View certificate → Install Certificate.
4. Choose Local Machine → Place all certificates in the following store → Trusted Root Certification Authorities.
5. Complete the wizard.

?? Only do this for sites you fully trust—this bypasses a key security feature.

When to Be Concerned

If this error appears on major sites (like Google, Facebook, or your bank), do not proceed. It could mean:

• A man-in-the-middle attack.
• Malware intercepting your traffic.
• Rogue certificate on your system.

Scan your PC with Windows Defender or Malwarebytes if you suspect foul play.

Basically, start with time settings and browser cache, then check antivirus interference. Most cases are due to local misconfigurations, not the website itself.

The above is the detailed content of how to fix 'the security certificate presented by this website was not issued by a trusted certificate authority' on win. For more information, please follow other related articles on the PHP Chinese website!