Skip to main content
tino_p
Staff
Staff
March 3, 2025

Technical Tip: The issue of ERR_CERT_DATE_INVALID when accessing websites via FortiProxy

  • March 3, 2025
  • 0 replies
  • 485 views
Description

This article describes the issue of ERR_CERT_DATE_INVALID when clients are accessing some specific websites via FortiProxy:

 

cert_error.jpg

 

When examining the certificate further, it showed that the certificate learned from FortiProxy was already expired:

 

 â€ƒinvalid_date.jpg

 

However, the actual certificate from FortiProxy is still valid:

 

screenshot.png
Scope FortiProxy.
Solution

Running the packet sniffer in FortiProxy, showed that when FortiProxy was communicating with an upstream device (Sophos Firewall) in TLS handshake, the certificate was encrypted in TLS 1.3 packets. So it should be checked further on the Sophos side. 

 

screenshot1.png