After some recent infrastructure changes, many users complained that they were unable to connect to Skweezer with SSL, which our log in page requires. Some phones would just show an unhelpful error like 513 or 503, page cannot be found. My Nokia popped up a strange error though, claiming that the server certificate expired even though the certificate expires next July. However, some browsers and phones had no problem at all establishing SSL. It turns out that there was nothing wrong with the certificate, and that's where it gets really weird.
According to this knowledge base article at Microsoft:
The previous VeriSign 128-bit International (Global) Server Intermediate certification authority certificate expired on January 7, 2004. This may cause problems for clients that try to establish server-authenticated secure socket layer (SSL) connections with Web servers and other SSL/Transport Layer Security (TLS)-enabled applications that do not have up-to-date certificates.
To prevent these problems, Microsoft Internet Information Services (IIS) operators should contact VeriSign to update the intermediate certification authority certificates for servers that use 128-bit SSL to connect to Web sites with the Secure Hypertext Transfer Protocol.
Impact: Clients cannot establish SSL-protected connections to Web servers that do not have updated certificates.
Recommendation: Install the updated version of the VeriSign intermediate certificate.
The announcement yesterday (


