Software

Hello,

DISCLAIMER: I'm a recent graduate with an IT Security degree who has been working in this user support position for about two months.

End users have been receiving the popup for the error message listed in the title for about 2 weeks on about 15 different Windows 7 PCs. The certificate is issued to javadl-esd-secure.oracle.com, and issued by GeoTrust SSL CA, with dates valid from 4/28/2014 to 6/29/2015.

Here's what I've been able to find out thus far:

• The starting validation date corresponds with the time frame that the heartbleed bug was discovered, but I'm not certain if this has anything to do with my issue.
  
• The problem could be caused by Java update checker; I've read that disabling this would prevent the popup.
• The problem could be caused by being unable to access the certificate revocation list; I've read that disabling the check for revocations in IE or in Java would prevent the issue (I do not want to pursue this avenue, because it creates another security concern).

The "easy" solution(s) would be to disable the revocation checks, but as I said, I do not want to do that. Frankly, I'm at a loss. Maybe it's an issue with Websense not allowing access to the site where the revocation list is at, but if that were the case, I'd think that this would be a much more widespread issue in our environment.

Can anyone help?