cancel
Showing results for 
Search instead for 
Did you mean: 
1

Ask

2

Reply

3

Solution

Vodafone website certificate revoked

beachsnap
4: Newbie

When logged into the https://www.vodafone.co.uk/ as a consumer customer I keep getting a notification that vodafones website certificate has been revoked. 

The message is as per the attached.

Says used by the server - studiouk.vavs.vodafone.com

Browser = Firefox 53.0.3 (64bit)

AV = Eset Smart Security. 

52 REPLIES 52

boylem
4: Newbie

Signing out of my business account today Avast gives me the error reported by others in this thread, i.e. that the certificate for studiouk.vavs.vodafone.com is revoked.  Avast is right. The URL https:\\studiouk.vavs.vodafone.com returns an SSL cert with serial 77001b3328c27de14a924b4c1d0001001b3328 and crl (certificate revocation list) at http://crl.ca.vodafone.com/crl/VodafoneCorporateServices2009(1).crl.

If you check that CRL the serial 77001b3328c27de14a924b4c1d0001001b3328 is on it, i.e. it has been revoked by vodafone. A quick look via chrome debug tools shows the logout step is attempting to call https://studiouk.vavs.vodafone.com/prototypes/loyalty/logout.php which is what trips the a/v revoked cert warning.  The call is coming from https://www.vodafone.co.uk/myvodafone/faces/oracle/webcenter/portalapp/pagehierarchy/Page3.jspx 

You either need a valid cert for the site or to remove references to it :Smiling:

This is a fairly harmless error (as it's during logoff) but security / cert errors are never an encouraging sign as noted by others! Historically I've had issues with the consumer and business account sites (e.g. pages hanging part way through page load ) which have gone away with avast web shield temporarily disabled;  likely some related issues.

Mike

 

 

Excellent work Boylem !

Now - Mods, get your technical people to get their act together and sort this once and for all!

They had all the information they needed, but it took a customer to identify the problem for them.

The shocking performance of VF support on this occasion just goes to demonstrate why there was an Ofcom investigation and subsequent fine....

Jenny
Moderator (Retired)
Moderator (Retired)

@boylem – Thanks for providing that info.

I’ve sent you a private message with instructions on how to get in touch, so we can look into this further.

FYI, provided info as requested, error still reported when I logged out today.

Gemma
Community Manager
Community Manager

@boylem - Did you get in touch with us via private message @Jenny sent?

I’ve searched for your email via the address you’ve registered to the Community with and nothing’s showing.

If you’ve sent us your details, what’s the reference from the auto reply email (it looks like #123456)?  

Hi Gemma,

thanks for the response. That's very odd - I did submit details as requested back on 25th July as PMed Jenny to that effect, but I didn't receive an email confirmation. I've just resubmitted and this time got an email confirmation so I guess something went wrong first time round. Probably operator error :Smiling: The details should be in the queue now, ref #16695824

Mike

 

 

 

Jenny
Moderator (Retired)
Moderator (Retired)

@boylem – I can see that Jake replied to your latest email on Friday. :Smiling:

Hi

14th August 2017 and this is still active and the error certificate revokes still appears, (I have just come off logging into my account). 

I reported this 25-05-2017 11:19 AM

I too suppliesd details via PM and nothing has been done. 

Whats going on please, are we any closer to resolution?

Thank you

beachsnap

Jenny
Moderator (Retired)
Moderator (Retired)

@beachsnap – If you can reply to the last email we sent, we’ll be able to look into this further.

What email nothing reecived

Please resend