The TLS certificate does not chain to a trusted certificate authority.

TLS_UNTRUSTED · Severity: Error

• ErrorTLS_UNTRUSTED

  The TLS certificate does not chain to a trusted certificate authority.

  The certificate could not be verified against the system's trusted roots. The reason in the evidence is self_signed, unknown_issuer, incomplete_chain or other. A missing intermediate certificate on the server is the most common cause, and it often shows as unknown_issuer, because the client cannot find the issuer either.

  Recommendation: Use a certificate from a public certificate authority and configure the server to send the full chain: the leaf followed by every intermediate certificate.

Reported by

• Site health check
• TLS certificate check

Available through the API

• Site health check API
• TLS certificate check API

Related findings

• Error TLS_UNAVAILABLE No TLS connection to the domain on port 443 could be made.
• Error TLS_CERT_EXPIRED The TLS certificate has expired.
• Info TLS_CERT_EXPIRING The TLS certificate expires within 30 days.
• Warning TLS_CERT_EXPIRING_SOON The TLS certificate expires in less than 14 days.
• Error TLS_HOSTNAME_MISMATCH The TLS certificate is not valid for the domain name.
• Warning TLS_WEAK_KEY The TLS certificate uses a weak public key.

All findings