How to Resolve the NET::ERR_CERT_SYMANTEC_LEGACY Error?

Introduction

The internet remains a very important factor in our daily interactions as it has made it easier for us to get information, communicate, and do other tasks online. But there are times when even the simplest things we do online are interrupted by errors that can be quite bothersome.

One such error is the “NET::ERR_CERT_SYMANTEC_LEGACY” error that can be encountered while attempting to visit some websites. This error is most often caused by outdated/expired SSL or TLS certificates that had been issued by a recognized security provider, the former Symantec Corporation, now owned by DigiCert.

Do not worry, if you have come across such an error, then you are not alone. We present a guide to help you solve this issue.

Troubleshooting Steps to Fix ERR CERT SYMANTEC LEGACY

Step 1: Clear Browser Cache and Cookies

The first step in resolving the NET::ERR_CERT_SYMANTEC_LEGACY is erasing the cookies and cache from the browser through the following steps:

Cookies and cache may occasionally interfere with your browser’s operations and rendering when determining the updated SSL/TLS certificates.

Here’s how to clear your browser’s cache and cookies:

Google Chrome:

• Open Google Chrome and click on the three dots in the top-right corner.
• An option named Clear Browsing Data will appear under the tab; select it.
• Click on the option and in the small window that appears, which reads “Clear browsing data,” select the time range as “All time“.
• If you want to remove all cache, select the check boxes for “Cached images and files” and “Cookies and other site data”.
• Click “Clear data“

Mozilla Firefox:

• Open Mozilla Firefox and click on the three horizontal lines in the top-right corner.
• Go to the Settings menu and click on the “Privacy & Security” tab located on the left, in the menu.
• In the stored data area, you will find the cookies and site data option. Click it, and then select Clear Data.
• Look at the options in the pop-up window where you need to check only the options named “Cached Web Content” and “Cookies and Active Logins”.
• Click “Clear“

If the problem persists, the next step is to clear Flash’s cache, and in most browsers, there is an option for this to simply delete Flash’s cache by going back to the Flash projector and closing it before reopening it. If the problem still stays with you, then go to the next process.

Step 2: Update Your Browser

Using an outdated browser version can also lead to the NET::ERR_CERT_SYMANTEC_LEGACY error. Software browser developers continuously release new versions to fix some issues regarding security and perform other optimizations, like compatibility with new web technologies, in such a way that they have the capacity to identify and trust the new and updated SSL/TLS certificates.

To update your browser, follow these steps:

Google Chrome:

• Open Google Chrome and click on the three dots in the top-right corner.
• Next, you are to click on ‘About Chrome’, which is displayed on the left side panel.
• Chrome will search for updates, and if there is an update, it will alert you to update to the latest version.

Mozilla Firefox:

• The first step is to open Mozilla Firefox and go to the three horizontal lines at the extreme top right corner.
• At the very top of your Firefox window click the “Help” pull-down menu, then click on the “About Firefox” option.
• Firefox has the ability to download updates from the Internet on its own if none is being downloaded at the moment, and then it will inform the user that an update is available and should be installed.

If you have the problem, you should first check your browser for an update, since it may have been the cause of the problem, and if so, try to access the site again. If, after completing all the above steps, the problem is not resolved, go to the next level.

Step 3: Remove Symantec Root Certificates

If the previous steps didn’t resolve the SYMANTEC_LEGACY error, some users have to uninstall the root certificates provided by Symantec Corporation from their computers.

These certificates are employed to check the credibility of SSL/TLS certificates, but less valid or expired ones might create issues, and thereby your browser may not be able to identify newly introduced certificates.

Here’s how to remove Symantec root certificates:

Windows:

• In this way, the first step is to press the Windows key + R to open the Command “Run”.
• For the next step, enter the command ‘certmgr.msc’ in the blank field and press Enter to open the Certificate Manager.
• The steps include going to the Certificate Manager window, then, going to “Trusted Root Certification Authorities” > “Certificates”.
• Look for any certificates issued by “Symantec Corporation” or “VeriSign, Inc.” and remove them.

macOS:

• Open the Application keychain, which could be done through the Utilities folder showing the option Keychain Access (located in Applications > Utilities).
• Go to the left-hand section of the window, and then click on the “System Roots” option.
• Look for the certificates that may be labeled as “Symantec Corporation” or “VeriSign, Inc.” and remove them from your system.

After removing the Symantec root certificates, try accessing the website again. If the issue persists, proceed to next step.

Step 4: Clear SSL State (Google Chrome)

If you’re using Google Chrome and the previous steps haven’t resolved the NET::ERR_CERT_SYMANTEC_LEGACY error, Reader can address this problem by clearing the SSL state.

This can assist in solving problems connected to SSL/TLS certificates by resetting the browser’s cached information about the cert.

Here’s how to clear the SSL state in Google Chrome:

• First, launch the Google Chrome browser, then right-click on the three-dot menu icon on the top-right side of the opened window.
• Next, choose ‘Settings’ and scroll to the ‘Privacy and Security’ option, which is located in the top left part of the window.
• Now, in the window that pops up, you need to scroll down and find the ‘Clear SSL state’ option.
• To complete the process, click on the “Clear SSL state” option.

Subsequently, the SSL state should be cleared, and later try to access the website to see the changes.

Step 5: Reset Internet Options (Windows)

If you’re using a Windows computer and the previous steps haven’t resolved the error, you would be left with one more solution you can attempt, which would be to clear the Internet Options.

This could be useful for fixing problems with SSL/TLS certificates and Internet connection settings since it restores identifiers to the default configuration.

Here’s how to reset Internet Options on Windows:

• Press the “Win” key on your keyboard and R simultaneously to launch the “Run” dialog box.
• Now, in the run dialog box, type ‘inetcpl.cpl’, and press ‘Enter’. This would open the Internet Properties window.
• In the Internet Properties window you need to click on the next tab marked as “Advanced. ”
• Move down to the section identified as Reset Internet Explorer Settings and in the pop-up window, click on the Reset button to proceed with the reset process of your Internet options.

After resetting your Internet Options, try accessing the website again.

Troubleshooting Tips

If you’ve followed the steps outlined above and are still encountering this warning, here are some tips you can follow:

• Perhaps you could do this by going to the website in another web browser or on a different device to find out if this is in some way tied to your current environment.
• Check if the website you’re trying to access is still using an outdated Symantec SSL/TLS certificate. In some cases, the website administrator may need to update or replace the certificate on their end, it is advisable to attempt to go back to the website in question. In case the problem is not solved, continue to the following next level.
• See to it that you are using the latest operating system and other related applications since the outdated OS or an app may cause incompatibility concerns with SSL/ TLS certificates.
• If the issue is related to being on a corporate or institutional network, then it would be best to consult with the IT support staff on duty to help modify the network configurations or implement specific policies that might help you resolve the issue.
• It is also possible to try and gain access to the website, using a virtual private network (VPN) or a proxy service since they may help to bypass the SSL/TLS certificate, which has been installed on the site.

Conclusion

Encountering the NET::ERR_CERT_SYMANTEC_LEGACY can halt your access to the websites that you may need regularly; however, with help, resolving such errors is possible. If the given steps are still not helpful in fixing the error, you should change the hosting provider, reach out to a professional, or join an online community for help.

However, remember that it is equally possible to spend a little patience and persistence throughout the internet error solutions, even if it is persistent.

Frequently Asked Questions

What is the NET::ERR_CERT_SYMANTEC_LEGACY error?

The NET::ERR_CERT_SYMANTEC_LEGACY denotes a situation that occurs when a given website is using an invalid SSL/TLS certificate that was issued by Symantec, a company that has been acquired by DigiCert.

Why does this sort of error occur?

This error can be triggered by several factors, including outdated WEB browser versions, the cached or cookie data stored on your computer, outdated SSL/TLS certificates, or conflicts with the Symantec root certificates embedded into your PC.

Is this error specific to a particular browser or operating system?

No, the NET::ERR_CERT_SYMANTEC_LEGACY is a common error that can be seen both in all popular web browsers and in all popular operating systems. However, there could be a slight difference when it comes to the procedures to be followed to resolve the same issue when applying the different browser types or the operating system, respectively.

Is it safe to remove Symantec root certificates from my computer?

It is safe to uninstall them since they are outdated, and there is no need for them to ensure the authenticity of SSL/TLS certificates. Nevertheless, it is still advisable to be safety-conscious when dealing with changes to your computer’s certificate store, and, where possible, acting in tandem with the guidelines as passed by authoritative sources.