Nutzer kann Revocation Status der Zertifikate nicht prüfen

[DadBeef]

Ein Nutzer kann die Signatur einer Datei nicht prüfen.
Was tun?

Code: Alles auswählen

C:\Users\D>sigcheck.exe -i C:\Users\D\Downloads\Vivaldi.3.6.2165.34.x64.exe

Sigcheck v2.80 - File version and signature viewer
Copyright (C) 2004-2020 Mark Russinovich
Sysinternals - www.sysinternals.com

c:\users\D\downloads\Vivaldi.3.6.2165.34.x64.exe:
Verified: A certificate chain processed, but terminated in a root
certificate which is not trusted by the trust provider.
Link date: 1:46 AM 27-Jan-21
Signing date: 7:48 AM 27-Jan-21
Catalog: c:\users\D\downloads\Vivaldi.3.6.2165.34.x64.exe
Signers:
Vivaldi Technologies AS
Cert Status: The revocation status of the certificate or one
of the certificates in the certificate chain is unknown., Error 65536 (0x10000),
The revocation status of the certificate or one of the certificates in the cert
ificate chain is either offline or stale.
Valid Usage: Code Signing
Cert Issuer: GlobalSign Extended Validation CodeSigning CA -
SHA256 - G3
Serial Number: 70 CE 29 F6 41 69 A8 AB CD D8 13 D1
Thumbprint: A601E2B4EAB80ED5A4C6496728270BF1CE5830B4
Algorithm: sha256RSA
Valid from: 9:47 PM 17-Nov-20
Valid to: 9:47 PM 18-Nov-23
GlobalSign Extended Validation CodeSigning CA - SHA256 - G3
Cert Status: The revocation status of the certificate or one
of the certificates in the certificate chain is unknown., Error 65536 (0x10000),
The revocation status of the certificate or one of the certificates in the cert
ificate chain is either offline or stale.
Valid Usage: Code Signing, OCSP Signing
Cert Issuer: GlobalSign
Serial Number: 48 1B 6A 07 A9 42 4C 1E AA FE F3 CD F1 0F
Thumbprint: 87A63D9ADB627D777836153C680A3DFCF27DE90C
Algorithm: sha256RSA
Valid from: 5:30 AM 15-Jun-16
Valid to: 5:30 AM 15-Jun-24
GlobalSign
Cert Status: The certificate or certificate chain is based on
an untrusted root.
Valid Usage: All
Cert Issuer: GlobalSign
Serial Number: 04 00 00 00 00 01 21 58 53 08 A2
Thumbprint: D69B561148F01C77C54578C10926DF5B856976AD
Algorithm: sha256RSA
Valid from: 3:30 PM 18-Mar-09
Valid to: 3:30 PM 18-Mar-29
Counter Signers:
GlobalSign TSA for Advanced - G3 - 003-02
Cert Status: The revocation status of the certificate or one
of the certificates in the certificate chain is unknown., Error 65536 (0x10000),
The revocation status of the certificate or one of the certificates in the cert
ificate chain is either offline or stale.
Valid Usage: Timestamp Signing
Cert Issuer: GlobalSign Timestamping CA - SHA256 - G2
Serial Number: 50 67 FA 46 CE 6C FE 95 15 A6 9E B2
Thumbprint: 7B5F749C90EE77BF294375E899BE0A66D085074C
Algorithm: sha256RSA
Valid from: 3:30 PM 14-Jun-18
Valid to: 3:30 PM 18-Mar-29
GlobalSign Timestamping CA - SHA256 - G2
Cert Status: The revocation status of the certificate or one
of the certificates in the certificate chain is unknown., Error 65536 (0x10000),
The revocation status of the certificate or one of the certificates in the cert
ificate chain is either offline or stale.
Valid Usage: All
Cert Issuer: GlobalSign
Serial Number: 04 00 00 00 00 01 31 89 C6 50 04
Thumbprint: 91843BBD936D86EAFA42A3AFBF33E92831068F99
Algorithm: sha256RSA
Valid from: 3:30 PM 02-Aug-11
Valid to: 3:30 PM 29-Mar-29
GlobalSign
Cert Status: The certificate or certificate chain is based on
an untrusted root.
Valid Usage: All
Cert Issuer: GlobalSign
Serial Number: 04 00 00 00 00 01 21 58 53 08 A2
Thumbprint: D69B561148F01C77C54578C10926DF5B856976AD
Algorithm: sha256RSA
Valid from: 3:30 PM 18-Mar-09
Valid to: 3:30 PM 18-Mar-29
Company: Vivaldi Technologies AS
Description: Vivaldi Installer
Product: Vivaldi Installer
Prod version: 3.6.2165.34
File version: 3.6.2165.34
MachineType: 64-bit

[Tante Google]

[DK2000]

Gute Frage. Der Status von Root Zertifikat ist unbestimmt. Dadurch ist die ganze Kette (chain) unbestimmt:

Code: Alles auswählen

A certificate chain processed, but terminated in a root certificate which is not trusted by the trust provider.

Code: Alles auswählen

GlobalSign Extended Validation CodeSigning CA - SHA256 - G3
Cert Status: The revocation status of the certificate or one of the certificates in the certificate chain is unknown., Error 65536 (0x10000),
The revocation status of the certificate or one of the certificates in the certificate chain is either offline or stale.

Geht speziell um das Root Zertifikat: CodeSigning CA - SHA256 - G3

Ist da jetzt nur bei der Datei so bzw. bei allen Dateien mit nur diesem Root CA? Oder betriffts das alle Dateien und Zertifikate?

Der Zertifizierungs-Dienst läuft? Nichts, was die Onlineverbindung blockiert?

Ansonsten schwer zu sagen. Mit Windows 10 funktioniert das soweit mit der Datei und dem Root-CA. Windows 7 kann ich leider nicht testen.