An HTTPS Virtual Service is reachable but displays an untrusted certificate error. What would NOT cause this issue?

Question

Options

• AThe certificate is an EC certificate instead of an RSA certificate.
• BThe certificate has expired.
• CThe system default self-signed certificate was used.
• DThe certificate is signed by a valid internal CA, but it is not trusted by the client.

• A
  70% (16)
• B
  4% (1)
• C
  17% (4)
• D
  9% (2)

Explanation

Option A is correct because the certificate's key algorithm - EC (elliptic curve) versus RSA - has no bearing on whether a client trusts it; both types can be validly signed and trusted by the same CA infrastructure. B is wrong because expired certificates are explicitly rejected by clients as untrusted, even if the CA is valid. C is wrong because self-signed certificates lack a trusted CA signature, so clients have no chain of trust to verify them against. D is wrong because even a legitimately signed certificate fails validation if the signing CA's root is not present in the client's trust store.

Memory tip: Focus on what the client actually checks - expiry date, CA trust chain, and certificate validity. The algorithm type (EC vs RSA) is invisible to trust decisions; think of it as the lock mechanism, not the locksmith's credentials.

No community discussion yet for this question.