CCleaner broke all Chrome-Based Browsers on my pc

[trav1s]

Hello everyone, 2 weeks ago I launched CCcleaner as usual and started cleaning. Before that, I hadn't done a Google Chrome cleanup for over 4 months. After that, all SSL-certificates in the browser broke. I reinstalled Google Chrome 2 times and it didn't help. I also noticed that it is the same in all chrome-based browsers like OperaGX, etc. In the browser LibreWolf/Mozilla Firefox and IE I don't have such a problem. Please tell me how I can fix this. Thank you very much for your attention

I apologize if I created a topic in the wrong category.

Edited October 24, 2021 by trav1s

[Andavari]

You reinstalled Chrome, however did you also create a brand new profile for Chrome to use? It's possibly something to do with the profile.

[trav1s]

28 minutes ago, Andavari said:

You reinstalled Chrome, however did you also create a brand new profile for Chrome to use? It's possibly something to do with the profile.

I don't use profiles at all

[trav1s]

2 hours ago, Andavari said:

You reinstalled Chrome, however did you also create a brand new profile for Chrome to use? It's possibly something to do with the profile.

Enabled / Disabled profile - did not help

[trav1s]

2 hours ago, Andavari said:

You reinstalled Chrome, however did you also create a brand new profile for Chrome to use? It's possibly something to do with the profile.

in most cases, the sites that I visited BEFORE starting the cleaning do not work. Although some sites that I have not visited before do not work. I tried to open a site in the OperaGX browser on which the SSL-certificate does not work for me with the VPN enabled from the opera - it did not help

[nukecad]

Can you post a screenshot/clip of one of the messages you are getting about the SSL?
Preferably showing the URL of the site being blocked.

SSL certificate do need to renewed now and again and some websites are tardy about that.
Whilst some browsers will still display them, other are more strict and will block a site with an out of date, or otherwise 'faulty', SSL.
(Although if you are seeing multiple SSL issues with different sites then there may be another cause).

Is this happening for ALL websites or just some?

Another important question - Did you use the Registry Cleaner tool in CCleaner?

[trav1s]

25 minutes ago, nukecad said:

Can you post a screenshot/clip of one of the messages you are getting about the SSL?
Preferably showing the URL of the site being blocked.

SSL certificate do need to renewed now and again and some websites are tardy about that.
Whilst some browsers will still display them, other are more strict and will block a site with an out of date, or otherwise 'faulty', SSL.
(Although if you are seeing multiple SSL issues with different sites then there may be another cause).

Is this happening for ALL websites or just some?

Another important question - Did you use the Registry Cleaner tool in CCleaner?

Another important question - Did you use the Registry Cleaner tool in CCleaner? - Yes.

Is this happening for ALL websites or just some? - For most websites.

For example - https://stackoverflow.com/ - NET::ERR_CERT_DATE_INVALID with many other sites similarly

With YT/GOOGLE/Twitch i don't have such a problem. 

 

 

[nukecad]

As I suspected the error is "CERT_DATE_INVALID", saying that the SSL is out of date.

However I visited your link (in Firefox) and on checking the sites certificate it is in date.

So, and especially as you are getting the same error on other sites, it's an issue with the Chrome on your machine.

It has probably been caused by using the Registry Cleaner, - You should not use any Registry Cleaner with Windows 10 (or 8, or 11) unless it's for a specific reason, see here for the CCleaners advice:
https://community.ccleaner.com/topic/59952-i-get-a-registry-error-on-ccleaner-on-windows-10-i-have-scanned-5-times/?tab=comments#comment-326804

Obviously the first thing to check is that your system date and time is correct.
Sometimes the little CMOS battery inside your computer runs out so it can't keep the time/date when turned off.

There are steps here for trying to fix SSL problems in Chrome: https://www.ssls.com/blog/how-to-fix-google-chrome-ssl-certificate-errors-in-a-few-simple-steps/

TBH though I suspect that you will need to update, restore, reset, or even uninstall/reinstall Chrome to fix the registry entries for it.
(In the worst cases of a damaged registry you may need to repair Windows itself).
https://www.wikihow.com/Repair-Google-Chrome

 

[trav1s]

10 minutes ago, nukecad said:

TBH though I suspect that you will need to update, restore, reset, or even uninstall/reinstall Chrome to fix the registry entries for it.
(In the worst cases of a damaged registry you may need to repair Windows itself).
https://www.wikihow.com/Repair-Google-Chrome

 

It did not help(

[nukecad]

I note that above you mentioned using a VPN. Do you still have the issue if you don't use the VPN?

Here are some more things to try (including simply telling Chrome to ignore SSL errors, not very secure but ...)
https://techcult.com/fix-ssl-certificate-error-google-chrome/

[trav1s]

55 minutes ago, nukecad said:

I note that above you mentioned using a VPN. Do you still have the issue if you don't use the VPN?

Here are some more things to try (including simply telling Chrome to ignore SSL errors, not very secure but ...)
https://techcult.com/fix-ssl-certificate-error-google-chrome/

Yes sir. Even when using VPN - the same problem/ without VPN too
OperaGX with VPN (screenshot below).
For example in the Mozilla Firefox Browser with VPN or without i don't have a such problem with SSL-certificates (screensholt below)

[nukecad]

Quote

in the Mozilla Firefox Browser with VPN or without i don't have a such problem with SSL-certificates

Which again points to the fact that it is something related to Chrome that has been 'broken'.

If it was something in Windows then it would affect Firefox too.

Have you tried the fixes for Chrome SSL errors in that latest link?

Other options:
Did you make a backup when the registry cleaner asked you to?
Do you have a system restore point from before you ran the Registry Cleaner?

[trav1s]

On 26/10/2021 at 18:09, nukecad said:

Did you make a backup when the registry cleaner asked you to?
Do you have a system restore point from before you ran the Registry Cleaner?

No. 

On 26/10/2021 at 18:09, nukecad said:

Have you tried the fixes for Chrome SSL errors in that latest link?

No, because you said it was not safe to use.

[nukecad]

8 hours ago, trav1s said:

No, because you said it was not safe to use.

I was meaning 'Method 3' there - that would/should work but it's a temporary fix, so it shouldn't realy be used as a long term solution.

The others should be worth a try.

(Pity about no backup or restore point, those might have been able to help).

[trav1s]

14 hours ago, nukecad said:

I was meaning 'Method 3' there - that would/should work but it's a temporary fix, so it shouldn't realy be used as a long term solution.

The others should be worth a try.

(Pity about no backup or restore point, those might have been able to help).

The first 2 methods did not help (

[Guest MeganCCleaner]

hi @trav1s Would you be willing to see if this problem persists after clearing the SSL cache, using the following steps?

1. Open the "Run" dialog in Windows (On the keyboard, hold the "Windows" () and "R" keys simultaneously)
2. Type: inetcpl.cpl > click OK
3. Open the "Content" tab > click "Clear SSL state"

[trav1s]

20 hours ago, MeganCCleaner said:

hi @trav1s Would you be willing to see if this problem persists after clearing the SSL cache, using the following steps?

1. Open the "Run" dialog in Windows (On the keyboard, hold the "Windows" () and "R" keys simultaneously)
2. Type: inetcpl.cpl > click OK
3. Open the "Content" tab > click "Clear SSL state"

Hello! Did it just now. Did not help.

[Guest MeganCCleaner]

Hi @trav1s The discussion here describes this happening as a result of there being a duplicated certificate, without a 'friendly' name. The problem was resolved by deleting the duplicacated certificate so I am curious if this would apply to your situation as well.

Are you able to find a duplicated "IGSR Root X1" certificate in Chrome, using the following steps?

1. Open Chrome > click Menu > Settings
2. Open "Privacy and Security" > Security
3. Click "Manage certificates"
4. Open the "Trusted Root Certification Authorities" tab

[trav1s]

49 minutes ago, MeganCCleaner said:

Hi @trav1s The discussion here describes this happening as a result of there being a duplicated certificate, without a 'friendly' name. The problem was resolved by deleting the duplicacated certificate so I am curious if this would apply to your situation as well.

Are you able to find a duplicated "IGSR Root X1" certificate in Chrome, using the following steps?

1. Open Chrome > click Menu > Settings
2. Open "Privacy and Security" > Security
3. Click "Manage certificates"
4. Open the "Trusted Root Certification Authorities" tab

Here's what I found here

[Guest MeganCCleaner]

Hi @trav1s I suspect that this issue may not have been caused by CCleaner because of how we've not received any other reports about this and instead, it sounds as though you are encountering the issue described at https://serverfault.com/questions/1079171/why-does-chrome-on-windows-7-still-display-the-old-root-certificate

This is also described at https://techcrunch.com/2021/09/21/lets-encrypt-root-expiry/

Under the "Trusted Root Certification Authority" tab, are you only able to find the old certificate (DST Root CA X3) instead of the new one, ISRG Root X1 ?

Also, can you please tell me what operating system you are using?

[trav1s]

30 minutes ago, MeganCCleaner said:

Hi @trav1s I suspect that this issue may not have been caused by CCleaner because of how we've not received any other reports about this and instead, it sounds as though you are encountering the issue described at https://serverfault.com/questions/1079171/why-does-chrome-on-windows-7-still-display-the-old-root-certificate

This is also described at https://techcrunch.com/2021/09/21/lets-encrypt-root-expiry/

Under the "Trusted Root Certification Authority" tab, are you only able to find the old certificate (DST Root CA X3) instead of the new one, ISRG Root X1 ?

Also, can you please tell me what operating system you are using?

I am using Windows 10.
I have DST Root CA X3.

ISRG Root X1  - i don't have

[Guest MeganCCleaner]

@trav1s I believe you can resolve this by manually installing the ISRG Root X1 certificate, at  https://letsencrypt.org/certs/isrgrootx1.der

(This file is published on the Let's Encrypt website at https://letsencrypt.org/certificates/)

Simply open the isrgrootx1.der file and click Install Certificate... - then allow the wizard to automatically select the certificate store.

[trav1s]

2 hours ago, MeganCCleaner said:

@trav1s I believe you can resolve this by manually installing the ISRG Root X1 certificate, at  https://letsencrypt.org/certs/isrgrootx1.der

(This file is published on the Let's Encrypt website at https://letsencrypt.org/certificates/)

Simply open the isrgrootx1.der file and click Install Certificate... - then allow the wizard to automatically select the certificate store.

I downloaded isrg-root-x1-cross-signed.der and installed it. It did not help

[Guest MeganCCleaner]

Hi @trav1s The article here explains that you may need to delete the “DST Root CA X3" certificate, and install both of the Root certificates - ISRG Root X1 & X2.

If you have the Sophos UTM firewall, it provides as solution for that as well.

Can this problem be resolved by deleting the old "DST Root CA X3" certificate, then installing both of the root certificates?

If not,  can you please tell me if this problem also occurs on websites that do not use the Let's Encrypt certificates, such as our https://ccleaner.com/ website?

(Our website uses a GlobalSign certificate so I suspect you will be able to access this, whereas you won't be able to access any website listed here, which use the Let's Encrypt certificates)

[trav1s]

54 minutes ago, MeganCCleaner said:

Hi @trav1s The article here explains that you may need to delete the “DST Root CA X3" certificate, and install both of the Root certificates - ISRG Root X1 & X2.

If you have the Sophos UTM firewall, it provides as solution for that as well.

Can this problem be resolved by deleting the old "DST Root CA X3" certificate, then installing both of the root certificates?

If not,  can you please tell me if this problem also occurs on websites that do not use the Let's Encrypt certificates, such as our https://ccleaner.com/ website?

(Our website uses a GlobalSign certificate so I suspect you will be able to access this, whereas you won't be able to access any website listed here, which use the Let's Encrypt certificates)

Done. Did not help. You righ sir, your website works good. https://trends.builtwith.com/websitelist/LetsEncrypt - this no