pc issue "client.uu.me" out-of-date certificate (anti-virus program message)

[Sergey_K]

When working with the browser, a message pops up from the antivirus program (Kaspersky Antivirus): "It is impossible to guarantee the authenticity of the domain with which the encrypted connection is established";
"Reason: This certificate or one of the certificates in the chain is not relevant."
See the screenshot.
 

[pantantrollo]

Right, it's expired.

There is another thread talking about the issue of maxthon SSL certificates, and although it is marked as resolved, it is not at all

http://forum.maxthon.com/index.php?/topic/23212-maxthon-ssl/

[BugSir006]

uu.me?

Please send me the complete URL which the un-safety message pop up. Here we can have a test. 

[Sergey_K]

I can not provide you with a specific address of the URL when entering on which a warning pops up. This happens by itself even with idle time in work, even if I do nothing in the browser and it is minimized in the tray. Some data can be synchronized, and the antivirus program responds to this ... In any case: the date of the certificate is overdue.

[Galileusz]

4 hours ago, Sergey_K said:

In any case: the date of the certificate is overdue.

You're right !!!

For www.uu.me page shows me a valid certificate.

 

But for client.uu.me it is not valid.

[Sergey_K]

I know - the page https://www.uu.me/ gives you a valid certificate specified by you. However, the antivirus program Kaspersky Anti-Virus "swears" on some other certificate. Here is the serial number of this expired certificate:

(Also note the different length of the public key: 2048 Bits and 4096 Bits)

33 minutes ago, Galileusz said:

But for client.uu.me it is not valid.

Ok. Thx. 

[Galileusz]

21 minutes ago, Sergey_K said:

I know - the page https://www.uu.me/ gives you a valid certificate specified by you. However, the antivirus program Kaspersky Anti-Virus "swears" on some other certificate. Here is the serial number of this expired certificate:

(Also note the different length of the public key: 2048 Bits and 4096 Bits)

 

From what I noticed, the public key for client.uu.me is longer (4096 Bits) and for uu.me shorter (2048 Bits).

Dates vary probably due to the difference in time.

[BugSir006]

client.uu.me

This address is the address of the interface for the app. This is for internal, please do not directly access it. In addition, here it doesn't show that the certificate expire when trying to enter. If others website also shows that the certificate is expired, I guess you could check the local time on computer is correct or not.

[Galileusz]

58 minutes ago, BugSir006 said:

In addition, here it doesn't show that the certificate expire when trying to enter.

Now it's correct, which does not mean it was like that before. Besides, you should watch over it and not the users. Not everyone knows that and trust is the foundation.

[Sergey_K]

On 3/14/2018 at 9:07 AM, BugSir006 said:

This address is the address of the interface for the app. This is for internal, please do not directly access it.

As I understand it - is there some kind of internal network connection?
The fact is that messages appear exactly from the network module of the anti-virus program (Kaspersky Web-AntiVirus). Here's how it looks in the program reports: "SSL-connection with an invalid certificate detected".