Overview Users Self-signed Admins Cross-signed OpenSSL  Home
Q.:  How to enable GlobalSign signed webservices again?
A.:  Disable the existing GlobalSign Root CA which expired 28th January 2014. Then, install the new revision which expires in 2028. Administrators should change their certificate chain to something like this (does not work with Nokia Series 40):
n s:/OU=GlobalSign Root CA - R2/O=GlobalSign/CN=GlobalSign
  i:/C=BE/O=GlobalSign nv-sa/OU=Root CA/CN=GlobalSign Root CA


Q.:  Am I affected: Which warning message should my mobile phone show ?
A.: 
BlackBerry 10  Site identity not verifiable → Expand to Continue → … for the following reasons: The site certificate on … (date is in the future)
update ot the latest firmware, or Menu → Settings → Security → Certificates → GlobalsSign Root CA → untick Trusted (do not open the 2028 but the 2014 one)
Nokia Series 40 
5th and 6th Ed.
Security info, Server certificate expired (Valid-until is in the future)
newer phones have R1 root which expiries 2028, not affected at all
earlier phones did not have any GlobalSign root
1. Menu → Settings → Security → Authority certificates → GlobalsSign Root CA → Options → Delete
2. Menu → Web → Go to → www.traud.de/ta → GlobalSign_Root_CA
Symbian OS Service 2014.globalsign.com has sent a certificate which is out of date.
1. Menu → Settings → Phone → Phone management → Security settings → Certificate management → Authority certificates → GlobalSign Root CA GlobalsSign nv-sa → (long tap) Options → Delete
2. Menu → Web → www.traud.de/ta → GlobalSign_Root_CA.cer → Options → Downloads → GlobalSign_Root_CA.cer → Save
  @