The final answer is so common I forgot to check. www.nttpc.ne.jp do not supply the intermediate issuing CA from the server. I'll pass to my Japanese colleagues to contact NTT and have the problem fixed.
If you install one of these issuing CA's into your system it will complete the chain. Windows will use the AIA extenstion inside the certifiacte to identify the missing certificates and therefore you'll not see the issue on IE. (99.9% sure this is the case) We have two versions of the issuing CA. One that supports SGC (Standard Product) and one that has the SGC Extended Key usage removed. I have placed both below. GlobalSign Domain Validation CA - SGC Serial Number 04 00 00 00 00 01 1e 44 a5 f8 95 Subject KeyID 36 12 4e 9e 71 c4 26 41 f1 fa f1 29 4c bf 17 a4 53 28 b6 eb Validity time Valid from : 04 May 2007 11:00:00 Valid to : 04 May 2017 13:00:00 -----BEGIN CERTIFICATE----- MIIEbjCCA1agAwIBAgILBAAAAAABHkSl+JUwDQYJKoZIhvcNAQEFBQAwVzELMAkG A1UEBhMCQkUxGTAXBgNVBAoTEEdsb2JhbFNpZ24gbnYtc2ExEDAOBgNVBAsTB1Jv b3QgQ0ExGzAZBgNVBAMTEkdsb2JhbFNpZ24gUm9vdCBDQTAeFw0wNzA1MDQxMDAw MDBaFw0xNzA1MDQxMjAwMDBaMHExCzAJBgNVBAYTAkJFMR0wGwYDVQQLExREb21h aW4gVmFsaWRhdGlvbiBDQTEZMBcGA1UEChMQR2xvYmFsU2lnbiBudi1zYTEoMCYG A1UEAxMfR2xvYmFsU2lnbiBEb21haW4gVmFsaWRhdGlvbiBDQTCCASIwDQYJKoZI hvcNAQEBBQADggEPADCCAQoCggEBALSfSeaznwFVNtA2lWzLFlpscrXineL6OekK 3HNcoDt2bQUokw2lQvPoy+7TMxoTJwrfXNFUYmqaFzbWPFiHHrJmH1VpK4lWR7TC UAzlXcH9KRtmc0P0b9EUTyptSFI69eSQP96y9BDV+fqslg0QMiPS01GnlYVQ+g8p naeITg0xm0RBjkEvbpoatLalWfFJWQl+fknTaTNLAJLFG0Igafhk39inRNGQXv05 rWt9/tWLpAFk9qe0IITMBS8n7h7VJJauhEOkPkPzO5nX+fLePRnt0GXxScpI0jh9 xkjXcmG4xsJnCthlWv1b88X9voxpz5kgtursOYDpZqjuPZ1Ge4cCAwEAAaOCAR8w ggEbMA4GA1UdDwEB/wQEAwIBBjASBgNVHRMBAf8ECDAGAQH/AgEAMEsGA1UdIARE MEIwQAYJKwYBBAGgMgEKMDMwMQYIKwYBBQUHAgEWJWh0dHA6Ly93d3cuZ2xvYmFs c2lnbi5uZXQvcmVwb3NpdG9yeS8wHQYDVR0OBBYEFDYSTp5xxCZB8frxKUy/F6RT KLbrMDMGA1UdHwQsMCowKKAmoCSGImh0dHA6Ly9jcmwuZ2xvYmFsc2lnbi5uZXQv cm9vdC5jcmwwEQYJYIZIAYb4QgEBBAQDAgIEMCAGA1UdJQQZMBcGCisGAQQBgjcK AwMGCWCGSAGG+EIEATAfBgNVHSMEGDAWgBRge2YaRQ2XyolQL30EzTSo//z9SzAN BgkqhkiG9w0BAQUFAAOCAQEAUDDGUrqceMIYdXPZDrqmzA4+/nm454LL6cz+ligM JuG9smtxsggGco4pr0h6rbo15prR/L6h481l5XFgLQCJ59Jrgnafm9dZjO42yfT0 6s5/QtO576vfu5eiQ4bPeSQvRsG9Cz2hNrn57nesHZ9roi59zLvDMQp9paczuFkN dYe/9jPGCXu+7mtw9wyOeiBSRX1mgruUspHtNy1l5BotHs9B1DkhjkQl7zobuxK6 /2kJO+P8vRBatmBrj4cCObi41BEx56IuiThG47NhgHSInh7xJ+uqkyLHtQnbqzcq OKRrcEp8wUNtCl+pS47s+YWwzXrb8P40f6dC+N7Hlm0fMw== -----END CERTIFICATE----- Operational CA – Non SGC Name GlobalSign Domain Validation CA Serial Number 04 00 00 00 00 01 1e 44 a5 fa 2c Subject KeyID 36 12 4e 9e 71 c4 26 41 f1 fa f1 29 4c bf 17 a4 53 28 b6 eb Validity time Valid from : 04 May 2007 11:00:00 Valid to : 04 May 2017 13:00:00 -----BEGIN CERTIFICATE----- MIIESjCCAzKgAwIBAgILBAAAAAABHkSl+iwwDQYJKoZIhvcNAQEFBQAwVzELMAkG A1UEBhMCQkUxGTAXBgNVBAoTEEdsb2JhbFNpZ24gbnYtc2ExEDAOBgNVBAsTB1Jv b3QgQ0ExGzAZBgNVBAMTEkdsb2JhbFNpZ24gUm9vdCBDQTAeFw0wNzA1MDQxMDAw MDBaFw0xNzA1MDQxMjAwMDBaMHExCzAJBgNVBAYTAkJFMR0wGwYDVQQLExREb21h aW4gVmFsaWRhdGlvbiBDQTEZMBcGA1UEChMQR2xvYmFsU2lnbiBudi1zYTEoMCYG A1UEAxMfR2xvYmFsU2lnbiBEb21haW4gVmFsaWRhdGlvbiBDQTCCASIwDQYJKoZI hvcNAQEBBQADggEPADCCAQoCggEBALSfSeaznwFVNtA2lWzLFlpscrXineL6OekK 3HNcoDt2bQUokw2lQvPoy+7TMxoTJwrfXNFUYmqaFzbWPFiHHrJmH1VpK4lWR7TC UAzlXcH9KRtmc0P0b9EUTyptSFI69eSQP96y9BDV+fqslg0QMiPS01GnlYVQ+g8p naeITg0xm0RBjkEvbpoatLalWfFJWQl+fknTaTNLAJLFG0Igafhk39inRNGQXv05 rWt9/tWLpAFk9qe0IITMBS8n7h7VJJauhEOkPkPzO5nX+fLePRnt0GXxScpI0jh9 xkjXcmG4xsJnCthlWv1b88X9voxpz5kgtursOYDpZqjuPZ1Ge4cCAwEAAaOB/DCB +TAOBgNVHQ8BAf8EBAMCAQYwEgYDVR0TAQH/BAgwBgEB/wIBADBLBgNVHSAERDBC MEAGCSsGAQQBoDIBCjAzMDEGCCsGAQUFBwIBFiVodHRwOi8vd3d3Lmdsb2JhbHNp Z24ubmV0L3JlcG9zaXRvcnkvMB0GA1UdDgQWBBQ2Ek6eccQmQfH68SlMvxekUyi2 6zAzBgNVHR8ELDAqMCigJqAkhiJodHRwOi8vY3JsLmdsb2JhbHNpZ24ubmV0L3Jv b3QuY3JsMBEGCWCGSAGG+EIBAQQEAwICBDAfBgNVHSMEGDAWgBRge2YaRQ2XyolQ L30EzTSo//z9SzANBgkqhkiG9w0BAQUFAAOCAQEAD4chUOL79qKKvVpaJJzT4irS xMDL1NI0RLdFDuWSjQeTh0vSHdHUDMeyWD9A9+N5Z4RuLEL5lpY3XZzjWmu7xB4T JGDDodFGTkDQ+s/Zi4Exj5ylLX+JjfkmjtyKlpM64H+jhhWYtGg9zp0BBuV+LyEi oCLmop4MtAkkGV1DQC6zcbk+CjFGIO9p3bV0u0OoKNdU611qPb5BOetboGFqX32x RirkGSbO/tP/d7b0VJPnLGQFkTp+IR7avnBFPxTudSldEADMsOSeYqAvvU1nD5T9 A5MfmEkP3VBtQc6GDyGURY39QmgSfNBL8GHdn9iGQiijvVGHE0GDV/WRIoqBYA== -----END CERTIFICATE----- thanks Steve -- Consider adding GlobalSign CA certificate https://bugs.launchpad.net/bugs/343798 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
