MtGox SSL certificate security warning on Android

[Jan]

Visiting https://mtgox.com using the web-browser on my Android 2.2 device gives me a security warning.



Certificate details:



This does not happen on my iPhone, desktop Chrome/Firefox browser.

I don't think that this was the case a few days ago.

I wonder whether they have recently updated their certificate and that it has been issued by a root certificate that my device does not know.

[rjk]

The main site's certificate is signed by Verisign, but the socket connection for displaying the current price is served with a StartSSL certificate. Likely, the StartSSL root cert isn't trusted on your device.

[paraipan]

maybe they forgot to add the intermediate cert For StartSSL, http://www.startssl.com/?app=25#31

[Cusipzzz]

getting same SSL error on mobile client on android, when trying to see BTC history. Everything else seems to work - weird.

[Tritonio]

Did anyone tell Mt Gox about this?

[grue]

The main site's certificate is signed by Verisign, but the socket connection for displaying the current price is served with a StartSSL certificate. Likely, the StartSSL root cert isn't trusted on your device.

but it says that the problem cert is issued by verisign

[rjk]

The main site's certificate is signed by Verisign, but the socket connection for displaying the current price is served with a StartSSL certificate. Likely, the StartSSL root cert isn't trusted on your device.

but it says that the problem cert is issued by verisign

Yeah I noticed that, but I guessed maybe that the "view certificate" dialog defaulted to opening the main site cert, instead of the one that was causing the error. Not sure, but in any case you need to compare the cert fingerprint with one from a trusted computer/connection, and make sure they match.

I had the same issue on my Blackberry until I added the StartSSL CA cert to my trusted roots, and then I stopped getting errors. YMMV.

[Jan]

Seems fixed now.