Hope someone can explain the impact as I know a bit but not too much about using certificates.

We use an external CA QV (I think now Digicert) to create certs and install into the web, vpn, wired/wireless dot1x servers. QV recently revoked an ICA and provided a new intermediate which prompted a scramble toupdate the vpn concentrators, web , etc.

Some mobile phones running iOS and android suddenly stopped connecting to the wireless. We found out they have a old profile installed which still contains the old revoked QV ICA.

We are going to update the profiles with the new ICA but I'm also trying to search/understand how the whole certificate chain works between clients and servers for when they both match and when they do not as in our case.

Anyone can please explain, provide links? Thanks in advance for the great assistance.

  • 1
    Is this what you are looking for: thesslstore.com/knowledgebase/ssl-support/… ?
    – Limit
    Feb 4, 2021 at 23:50
  • @Limit -Thanks for the link. Was l ooking for a more detail explanantion still cannot find. i.e is it the serial that doesn't match, the hash, etc... what is it that the two different ICAs just disagrees with?
    – user4565
    Feb 7, 2021 at 20:51


You must log in to answer this question.

Browse other questions tagged .