Knowledge Base Subdomain

[OsmanE23]

Has anyone else noticed that the “knowledgebase.constantcontact.com” subdomain is not secure? I encounter a warning when I visit the site and my browser shows the certificate for the site is invalid? A bit of a problem when I try to direct other users to read Knowledge Base articles. (Raises questions.)

[OsmanE23]

All of those links load as expected from my side, even in incognito, and even when I visit them on my personal devices like my cell phone and personal desktop. I'm not receiving any warning regarding the security certificate.

Is this issue occurring on all devices you have access to - including those off of your organization's network, such as mobile data on your phone or a personal device on your home network? Have any of your clients mentioned the security certificate warning? 

Has your IT recently made any changes to your network security, that would be incorrectly labelling domains we use, including our main site, as being insecure?

[William_A]

Hello @OsmanE23 ,

Please submit feedback on those articles so our Knowledge Base team can get them updated. If you encountered the link from an older post in the Community, please provide that post's URL so we can update it with the correct KB article link.

[OsmanE23]

Hello William,

I see it on every article in the Knowledge Base that I visit. Every page tells me that the certificate is invalid.

That said, here are some examples:

https://knowledgebase.constantcontact.com/email-digital-marketing?lang=en_US

https://knowledgebase.constantcontact.com/email-digital-marketing?t=tutorial&catsubsort=true&lang=en...

https://knowledgebase.constantcontact.com/email-digital-marketing/articles/KnowledgeBase/5553-gettin...

https://knowledgebase.constantcontact.com/email-digital-marketing/articles/KnowledgeBase/39185-Track...

[William_A]

All of those links load as expected from my side, even in incognito, and even when I visit them on my personal devices like my cell phone and personal desktop. I'm not receiving any warning regarding the security certificate.

Is this issue occurring on all devices you have access to - including those off of your organization's network, such as mobile data on your phone or a personal device on your home network? Have any of your clients mentioned the security certificate warning? 

Has your IT recently made any changes to your network security, that would be incorrectly labelling domains we use, including our main site, as being insecure?

[OsmanE23]

Thanks, William! I think you're right. I think it is something specific to our network. I have been seeing it for some time now, but I sent the links to my personal device and there was no security warning.

Will speak with our internal team. Thank you!

[OsmanE23 · Accepted solution]

William, investigating this more from our end, our team was able to help us with this issue, BUT, they were able to determine that there IS an issue with the site's certificates.

Here is a result from an independent SSL diagnostic tool indicating there is an error related to the certificate chain:

https://www.sslshopper.com/ssl-checker.html#hostname=https://knowledgebase.constantcontact.com/

“The certificate is not trusted in all web browsers. You may need to install an Intermediate/chain certificate to link it to a trusted root certificate.”

Passing this on in hopes that it is helpful for your team. Correcting the issue may help others with similar network security configurations.