Forum Discussion
ERR_CERT_COMMON_NAME_INVALID on Windows but not on Mac for same URL and both using Norton
please try this
1. navigate to: edge://net-internals/#hsts
2. First, to confirm the domain’s HSTS settings are recorded by Edge, type the hostname into the Query Domain section, Click Query.
If the Query box returns Found with settings information, the domain’s HSTS settings are saved in your browser.
*Note that this is a very sensitive search. Only enter the hostname, such as www.example.com or example.com without a protocol or path.
3. Type the same hostname into the Delete domain section and click on Delete.
*Note that depending on the HSTS settings provided by the site, you may need to specify the proper subdomain. For example, the HSTS settings for staging.yoursite.com may be separate from yoursite.com so you may need to repeat the steps as appropriate.
You can test if it's working properly by refreshing or navigating to the Box website again
HotCakeX thanks for your suggestion. I haven't removed the global certificate authorities from the built-in certificate store in Windows. I uninstalled Norton and re-booted, when I try to access the Box site I get the same error. The detail description is this:
app.box.com uses encryption to protect your information. When Microsoft Edge tried to connect to app.box.com this time, the website sent back unusual and incorrect credentials. This may happen when an attacker is trying to pretend to be app.box.com, or a WiFi sign-in screen has interrupted the connection. Your information is still secure because Microsoft Edge stopped the connection before any data was exchanged.
You can't visit app.box.com at the moment because the website uses HSTS. Network errors and attacks are usually temporary, so this page will probably work later.
It's unlikely to be a website problem as all the other team members are using it, mostly on Windows, and no-one else has had an issue. Also it works fine on my Mac.
Do you have any other suggestions, perhaps in Windows network settings? Years ago we used to set a website URL as "safe". Not sure you can do that nowadays.
please try this
1. navigate to: edge://net-internals/#hsts
2. First, to confirm the domain’s HSTS settings are recorded by Edge, type the hostname into the Query Domain section, Click Query.
If the Query box returns Found with settings information, the domain’s HSTS settings are saved in your browser.
*Note that this is a very sensitive search. Only enter the hostname, such as www.example.com or example.com without a protocol or path.
3. Type the same hostname into the Delete domain section and click on Delete.
*Note that depending on the HSTS settings provided by the site, you may need to specify the proper subdomain. For example, the HSTS settings for staging.yoursite.com may be separate from yoursite.com so you may need to repeat the steps as appropriate.
You can test if it's working properly by refreshing or navigating to the Box website again