[Jason Irvine]

I have clicked on a link from my mail app to go to a webpage, and I get a red lock icon that states:

YOUR CONNECTION IS NOT PRIVATE, ATTACKERS MIGHT BE TRYING TO STEAL YOUR INFORMATION FROM [DOMAIN]. THIS SERVER COULD NOT PROVE THAT IT IS [DOMAIN]; ITS SECURITY CERTIFICATE IS NOT TRUSTED BY YOUR DEVICES OPERATING SYSTEM. THIS MAY BE CAUSED BY A MISCONFIGURATION OR AN ATTACKER INTERCEPTING YOUR CONNECTION.

PROCEED TO [DOMAIN] (UNSAFE)

When I do proceed, the https is in red and a red line is strike through.

I contacted the webmaster that assured me that it is safe and they are only getting feedback about this from android phones. Any idea what the problem might be? See attached screen shot. Any assistance is most appreciated.

[jpr]

If this error message started recently it is likely because the website owner has not updated their SSL cert to SHA-2, like they were supposed to do by November 14th. SHA-1 is now considered an insecure connection.

[jpr]

Btw, I did just check the website that is included in your screenshot and it is using SHA-1. So they need to fix that ASAP.

[Roy Moses]

Hello!

I hope this is ok to post it here,
but i am getting the same thing for this: try to go to photoalbum .co with https.


which is weird because it's working in my computer in chrome and Firefox..
only not working on my android..

I checked and it has SHA-2
Algorithm Type : sha256WithRSAEncryption

someone know what needs to be done to be able to fix this?

Thanks in advance!