Microsoft KB Archive/318620

= SSL Web Sites May Take a Long Time to Load with Internet Explorer 5 =

Article ID: 318620

Article Last Modified on 8/9/2007

-

APPLIES TO


 * Microsoft Internet Explorer 5.5 Service Pack 1
 * Microsoft Internet Explorer 5.5 Service Pack 2
 * Microsoft Internet Explorer 5.5 Service Pack 1
 * Microsoft Internet Explorer 5.5 Service Pack 2
 * Microsoft Internet Explorer 5.01
 * Microsoft Internet Explorer 5.01
 * Microsoft Internet Explorer 5.0
 * Microsoft Internet Explorer 5.5 Service Pack 1
 * Microsoft Internet Explorer 5.5 Service Pack 2
 * Microsoft Internet Explorer 5.01
 * Microsoft Internet Explorer 5.01

-



This article was previously published under Q318620



SYMPTOMS
If you use Internet Explorer 5.x to visit a Web site that uses Secure Sockets Layer (SSL), it may take a long Q318620 time to load the page.



CAUSE
When you visit a Web site that uses SSL, Internet Explorer tries to verify the certificate against the Certificate Revocation list. If that list is not available, or if the root certificate is not trusted, Internet Explorer takes a long time to time out. When Internet Explorer times out, you receive the following message:

The security certificate was issued by a company you have not chosen to trust. View the certificate to determine whether you want to trust the certifying authority.

If you choose to proceed, the page is loaded.



RESOLUTION
To resolve this issue, use either of the following methods:
 * Trust the certifying authority by installing the root certificate for the certifying authority in the Trusted Root Certification Authorities store in Internet Explorer.
 * Publish the Certificate Revocation list so that Internet Explorer can verify the certificate. You still receive the security message this is listed earlier in this article.

For additional information about how to publish the Certificate Revocation list with Microsoft Internet Information Services 5.0 and Microsoft Internet Security and Acceleration Server 2000, click the article number below to view the article in the Microsoft Knowledge Base:

318707 How to configure Windows Certificate Services and ISA Server 2000 for CRL publishing

This article also describes how to publish the root certificate if you require clients to able to verify the certificate path.



STATUS
Microsoft has confirmed that this is a problem in the Microsoft products that are listed at the beginning of this article.

Keywords: kbenv kbprb KB318620

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.