Analysis: Reason 1: This is because the certificate is not in the trusted list of browser vendors. You can install the certificate into your browser's Trust List by manually adding it. Methods: Select Options → Content tab → Certificate → Import in the browser. However, the above method is only applicable to self-signed certificates, and every device browsing the site needs this operation. Self-signed certificates have great security risks, so it is recommended to use ssl certificates issued by authoritative CA institutions, such as GlobalSign, GeoTrust, Symante, GDCA, etc. The second reason is that ssl certificates used by website servers are not issued by globally trusted CA organizations. Methods: Therefore, it is recommended to choose internationally certified certificates, such as Globalsign SSL, GeoTrust SSL, Symante SSL and GDCA ssl certificates. Third, ssl certificate is not installed correctly. It is necessary to check whether the pre-existing or tested certificate has been deleted. If the certificate of the website is confirmed to be correct, please restart the network server.
SSL error: Unable to establish a secure connection. The domain name contained in the SSL certificate is inconsistent with the website address.
Resolution: The domain name corresponding to each ssl certificate is unique and is a fully qualified domain name (FQDN). When the domain name contained in the certificate issued by the website is inconsistent with the domain name of the website, the system will automatically issue a report, prompting that the certificate domain name does not match. Method: You need to reapply for ssl certificate. If there are multiple sites with the same primary domain name, you should apply for a multi-domain ssl certificate. GDCA has many different brands of multi-domain ssl certificates, and users can choose according to their own needs. Ssl Error 3: When using the anonymous Diffie-Hellman(ADH) algorithm, you will receive the error "No shared cipher". Analysis: By default, for security reasons, Openssl does not enable ADH algorithm. Only when users really understand the side effects of this algorithm can they enable this algorithm. Methods: In order to use the anonymous Diffie-Hellman(ADH) algorithm, users must use the "-Dssl_ALLOW_ADH" configuration option when compiling Openssl, and add "ADH" to the sslCipherSuite instruction.