Certificate Revoked on www.boibusinesscards.ie

goose06

Can someone update this please I am not able to access this site due to a revoked certificate.

https://www.boibusinesscards.ie/dcal/AuthenticationServlet?action=loginmain&language=826&custom=boi&bankId=152077

Secure Connection Failed

An error occurred during a connection to www.boibusinesscards.ie. Peer's Certificate has been revoked. (Error code: sec_error_revoked_certificate)

    The page you are trying to view cannot be shown because the authenticity of the received data could not be verified.
    Please contact the web site owners to inform them of this problem.

Thanks

Bank of Ireland: Alison

Hi goose06

Thanks for contacting us here on Boards.

We're sorry to hear of the difficulties you are experiencing. We will have this looked into and come back to you asap.


Thanks
Alison

Irish Steve

Don't hold your breath, I reported an out of date certificate to BOI a while back, and had to be aggressively persistent with their senior management people in the fraud section to even get a fix date, which eventually was some 6 MONTHS down the line, in the meantime, the suggested avoidance was to "ignore the security warning from your browser". Yeah.

goose06

Pretty shocking that a bank would advise you to ignore a security warning that allows unsecure traffic between you and them.
Anyway in this the case the Cert has been revoked rather than expired so most modern browsers will prevent access to it rather than allow you to ignore it.
Issuing a new cert should only take a couple of days max.

Bank of Ireland: Janet

Irish Steve wrote: »

Don't hold your breath, I reported an out of date certificate to BOI a while back, and had to be aggressively persistent with their senior management people in the fraud section to even get a fix date, which eventually was some 6 MONTHS down the line, in the meantime, the suggested avoidance was to "ignore the security warning from your browser". Yeah.

Hi Irish Steve, 

Thanks for posting this on Boards.

Security is of up-most importance to us. We will pass on your feedback to the BOL management team.

Janette

Bank of Ireland: Alison

goose06 wrote: »

Pretty shocking that a bank would advise you to ignore a security warning that allows unsecure traffic between you and them.
Anyway in this the case the Cert has been revoked rather than expired so most modern browsers will prevent access to it rather than allow you to ignore it.
Issuing a new cert should only take a couple of days max.

Hi goose06

We have sent this to our Technical Team, work is in progress and we will be sure to come back to you as soon as we have an update.

Thanks
Alison

Tow

Must be year now since I first pointed out this https://www.boi.ie/ and this https://www.bankofireland.ie/

goose06

FirstData.com the host company's response to this query is to remove CRL checks on your browser for a couple of days while they fix the problem. :rolleyes:



Internet Explorer
 1. In IE, go to Tool\Options
 2. Select the Advanced tab
 3. Clear the "Check for server certificate revocation" checkbox.
 4. Restart IE.
 
Firefox
By default, Firefox do OSCP now you can disable OCSP:
in a Firefox F3 browser location bar type "about:config"
in the filter box, type "security"
double-click the entry "security.OCSP.enabled" and change the 1 to a 0

Bank of Ireland: Alison

Hi goose06

We have just heard back from First Data, they have advised us all is ok now with the sites certificates. It's no longer necessary to follow the above steps.

Sorry for the confusion and thanks for taking the time to query this here with us.

Thanks
Alison

Irish Steve

Tow wrote: »

Must be year now since I first pointed out this https://www.boi.ie/ and this https://www.bankofireland.ie/

This Connection is Untrusted

You have asked Firefox to connect securely to www.bankofireland.ie, but we can't confirm that your connection is secure.

Normally, when you try to connect securely, sites will present trusted identification to prove that you are going to the right place. However, this site's identity can't be verified.
What Should I Do?

If you usually connect to this site without problems, this error could mean that someone is trying to impersonate the site, and you shouldn't continue.

www.bankofireland.ie uses an invalid security certificate. The certificate is only valid for the following names: *.bankofireland.com, bankofireland.com (Error code: ssl_error_bad_cert_domain)


Classic. perhaps someone at BOI needs to do a domain name review, and sort out some of the chaos/debris that's built up over the years. The Phrase "left hand, right hand" comes to mind.

Wonder how long this one will take.