Answers.Body: <p>See <a href="https://github.com/totten/ca_config/issues/2" rel="nofollow noreferrer">https://github.com/totten/ca_config/issues/2</a>. Core hasn't been updated yet but you can composer require totten/ca-config:~22.05</p>
  
Answers.ContentLicense: CC BY-SA 4.0
Answers.CreationDate: 2022-05-05T12:09:26.367Z
Answers.LastActivityDate: 2022-05-05T12:09:26.367Z
Answers.UserDisplayName: Demerit
Answers.Body: <p>So that's something I didn't expect....</p>
  <p>After digging a bit within our Root Certificates I found out that the name of the current GlobalSign Root CA is actually &quot;GlobalSign Root CA - R1&quot; (in our certificate vault at least).</p>
  <p>Inside the cacert.pem file however the name is listed as &quot;GlobalSign Root CA&quot; followed by the Certificate Hash.</p>
  <p>After editing the file cacert.pem and adding the &quot;- R1&quot;-part and refreshing the site it immediately worked.</p>
  <p>I really don't know why on earth and especially how this got messed up.</p>
  <p>Anyway it's working now.</p>
  
Answers.ContentLicense: CC BY-SA 4.0
Answers.CreationDate: 2022-05-05T10:47:12.940Z
Answers.LastActivityDate: 2022-05-05T10:47:12.940Z
Answers.UserDisplayName: Michael
Body: <p>Today we wanted to access our civicrm site which is hosted within a bitnami stack but we receive the following error:</p>
  <p>Certificate Authority file is too old. Please contact the system administrator. See also: C:\Bitnami\civicrm-5.37.2-0\apps\civicrm\htdocs\sites\all\modules\civicrm\vendor\totten\ca-config\src\CA\Config/cacert.pem</p>
  <p><a href="https://i.sstatic.net/3Lkr4.png" rel="nofollow noreferrer"><img src="https://i.sstatic.net/3Lkr4.png" alt="enter image description here" /></a></p>
  <p>We can't open the civicrm site.</p>
  <p>I looked up the expiring date from that cacert.pem file / Global Sign Root CA but the date is far in the future (28.01.2028).</p>
  <p>Does anyone know what is causing that problem and probably how to fix it?</p>
  <p>I tried google but with no success.</p>
  <p>We run civicrm version 5.45.1 on Drupal 7.</p>
  
Tags: <drupal><drupal-7>
Title: Error: Certificate Authority file is too old. ..\modules\civicrm\vendor\totten\ca-config\src\CA\Config/cacert.pem
ThreadText: # Error: Certificate Authority file is too old. ..\modules\civicrm\vendor\totten\ca-config\src\CA\Config/cacert.pem
  
  (Asked by: username_0 on 2022-05-05)
  
  Today we wanted to access our civicrm site which is hosted within a bitnami stack but we receive the following error:
  
  Certificate Authority file is too old. Please contact the system administrator. See also: C:\Bitnami\civicrm-5.37.2-0\apps\civicrm\htdocs\sites\all\modules\civicrm\vendor\totten\ca-config\src\CA\Config/cacert.pem
  
  [![enter image description here](https://i.sstatic.net/3Lkr4.png)](https://i.sstatic.net/3Lkr4.png)
  
  We can't open the civicrm site.
  
  I looked up the expiring date from that cacert.pem file / Global Sign Root CA but the date is far in the future (28.01.2028).
  
  Does anyone know what is causing that problem and probably how to fix it?
  
  I tried google but with no success.
  
  We run civicrm version 5.45.1 on Drupal 7.
  
  **Tags:** drupal, drupal-7
  
  
  ---
  
  ## 2 answers
  
  ### Answer by username_1 on 2022-05-05. Score: 0 | Accepted answer
  
  See <https://github.com/totten/ca_config/issues/2>. Core hasn't been updated yet but you can composer require totten/ca-config:~22.05
  
  
  ---
  
  ### Answer by username_0 on 2022-05-05. Score: 0
  
  So that's something I didn't expect....
  
  After digging a bit within our Root Certificates I found out that the name of the current GlobalSign Root CA is actually "GlobalSign Root CA - R1" (in our certificate vault at least).
  
  Inside the cacert.pem file however the name is listed as "GlobalSign Root CA" followed by the Certificate Hash.
  
  After editing the file cacert.pem and adding the "- R1"-part and refreshing the site it immediately worked.
  
  I really don't know why on earth and especially how this got messed up.
  
  Anyway it's working now.
  
  
  ---
  
  