Ask a Question

Advanced Search

Solution ID : SO28100

Last Modified : 05/02/2018

GeoTrust True Site Seal Splash Page Showing "Website identity NOT confirmed"

Problem

When clicking on a GeoTrust True Site Seal the splash page message below may appear.


 

Cause

This problem may occur when any of the following conditions are true:

  • Incorrect Seal script is used.
  • GeoTrust True Site Seal does not support web servers that uses Server Name Indication (SNI).
  • Seal script cannot identify Subject Alternative Names (SANs) of the SSL Certificate in GeoTrust Seal database.
  • No SSL connection is accepted on the IP address where the website resolves.
  • TLS 1.1 & TLS 1.2 is disabled.

Solution

Possible solutions to this issue can be found below:

  1. Make sure the correct Seal script is being used.

  2. If the server hosting the SSL Certificate uses SNI the splash page above may received as this is expected behavior.
    This is because a server using SNI may have multiple SSL Certificates using the same IP address.
    To verify, please enter the IP address assigned to the website via GeoTrust Installation Checker and check to see what SSL Certificates is returned.

    If the certificate returned is anything other than the certificate issued by GeoTrust, this indicates that the server hosting the Certificate has SNI enabled, resulting in the expected message: "Website identity NOT confirmed".

    NOTE: GeoTrust is currently working on adding support for SNI.
     
  3. If no SSL connection is accepted on the IP address where the website resolves, please consult your server administrator or hosting provider.
     
  4. Currently, TLS 1.1 & TLS1.2 is only supported.  If this protocol is currently disabled, please enable TLS 1.1 and above on the server in which the GeoTrust True Site Seal is installed on your website.