GeoTrust True Site Seal Splash Page Showing "Website identity NOT confirmed"
When clicking on a GeoTrust True Site Seal the splash page message below may appear.
↵This problem may occur when any of the following conditions are true:
Incorrect Seal script is used.
GeoTrust True Site Seal does not support web servers that uses Server Name Indication (SNI).
Seal script cannot identify Subject Alternative Names (SANs) of the SSL Certificate in GeoTrust Seal database.
No SSL connection is accepted on the IP address where the website resolves.
TLS 1.1 & TLS 1.2 is disabled.
↵↵Possible solutions to this issue can be found below:
Make sure the correct Seal script is being used.
If purchased a GeoTrust True BusinessID, GeoTrust True BusinessID with EV, GeoTrust True BusinessID Wildcard or a QuickSSL Premium "enrolled after 2/29/16" please make sure the Seal below is being used.
If the server hosting the SSL Certificate uses SNI the splash page above may received as this is expected behavior.
This is because a server using SNI may have multiple SSL Certificates using the same IP address.
To verify, please enter the IP address assigned to the website via GeoTrust Installation Checker and check to see what SSL Certificates is returned.
If the certificate returned is anything other than the certificate issued by GeoTrust, this indicates that the server hosting the Certificate has SNI enabled, resulting in the expected message: "Website identity NOT confirmed".
NOTE: GeoTrust is currently working on adding support for SNI.
If no SSL connection is accepted on the IP address where the website resolves, please consult your server administrator or hosting provider.
Currently, TLS 1.1 & TLS1.2 is only supported. If this protocol is currently disabled, please enable TLS 1.1 and above on the server in which the GeoTrust True Site Seal is installed on your website.