TlsTest.exe throws CERT_E_CHAINING even with certificates imported via certmgr

--===============2647323015941846337==
Content-Type: multipart/alternative; boundary=001a11457c22a25773054d9e382b

--001a11457c22a25773054d9e382b
Content-Type: text/plain; charset=UTF-8

Hello,

On Linux, I'm running into SSL certificate validation issues attempting to
connect to https://google.com. I've run mozroots --import --sync, used
cert-sync on a Mozilla derived CA bundle and imported the certificates via
certmgr -ssl https://google.com. For good measure, I've run the same
commands for the machine stores. However the issue still persists. Does
anybody have any pointers on how to fix this?

I'm using Mono JIT compiler version 4.6.2 (Stable 4.6.2.7/08fd525 Wed Nov
23 12:56:10 EST 2016)

The output from certmgr -ssl https://google.com is

Mono Certificate Manager - version 4.6.2.0
Manage X.509 certificates and CRL from stores.
Copyright 2002, 2003 Motus Technologies. Copyright 2004-2008 Novell. BSD
licensed.


X.509 Certificate v3
   Issued from: C=US, O=Equifax, OU=Equifax Secure Certificate Authority
   Issued to:   C=US, O=GeoTrust Inc., CN=GeoTrust Global CA
   Valid from:  5/21/2002 4:00:00 AM
   Valid until: 8/21/2018 4:00:00 AM
   *** WARNING: Certificate signature is INVALID ***
This certificate is already in the CA store.

X.509 Certificate v3
   Issued from: C=US, O=GeoTrust Inc., CN=GeoTrust Global CA
   Issued to:   C=US, O=Google Inc, CN=Google Internet Authority G2
   Valid from:  4/1/2015 12:00:00 AM
   Valid until: 12/31/2017 11:59:59 PM
   *** WARNING: Certificate signature is INVALID ***
This certificate is already in the CA store.

X.509 Certificate v3
   Issued from: C=US, O=Google Inc, CN=Google Internet Authority G2
   Issued to:   C=US, S=California, L=Mountain View, O=Google Inc, CN=*.
google.com
   Valid from:  4/12/2017 2:19:56 PM
   Valid until: 7/5/2017 1:29:00 PM
This certificate is already in the AddressBook store.

No certificate were added to the stores.

The output from mono TlsTest.exe https://google.com is

https://google.com
[Subject]
  CN=*.google.com, O=Google Inc, L=Mountain View, S=California, C=US

[Issuer]
  CN=Google Internet Authority G2, O=Google Inc, C=US

[Not Before]
  4/12/2017 4:19:56 PM

[Not After]
  7/5/2017 3:29:00 PM

[Thumbprint]
  659785A076AA7B417C4282F121B0E99BCD34B183


        Valid From:  4/12/2017 4:19:56 PM
        Valid Until: 7/5/2017 3:29:00 PM

Error #-2146762486: CERT_E_CHAINING 0x800B010A

The signature warnings in the certmgr output concern me, but I couldn't
find anything definitive regarding them.

Best regards,

Rico

--001a11457c22a25773054d9e382b
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div><div><div><div><div><div><div>Hello,<br><br></div>On =
Linux, I&#39;m running into SSL certificate validation issues attempting to=
 connect to <a href=3D"https://google.com" target=3D"_blank">https://google=
.com</a>.
 I&#39;ve run mozroots --import --sync, used cert-sync on a Mozilla derived=
=20
CA bundle and imported the certificates via certmgr -ssl <a href=3D"https:/=
/google.com" target=3D"_blank">https://google.com</a>.
 For good measure, I&#39;ve run the same commands for the machine stores.=
=20
However the issue still persists. Does anybody have any pointers on how=20
to fix this?<br><br></div>I&#39;m using Mono JIT compiler version 4.6.2 (St=
able <a href=3D"http://4.6.2.7/08fd525" target=3D"_blank">4.6.2.7/08fd525</=
a> Wed Nov 23 12:56:10 EST 2016)<br><br></div>The output from certmgr -ssl =
<a href=3D"https://google.com" target=3D"_blank">https://google.com</a> is<=
br><br><div style=3D"margin-left:40px">Mono Certificate Manager - version 4=
.6.2.0<br>Manage X.509 certificates and CRL from stores.<br>Copyright 2002,=
 2003 Motus Technologies. Copyright 2004-2008 Novell. BSD licensed.<br><br>=
<br>X.509 Certificate v3<br>=C2=A0=C2=A0 Issued from: C=3DUS, O=3DEquifax, =
OU=3DEquifax Secure Certificate Authority<br>=C2=A0=C2=A0 Issued to:=C2=A0=
=C2=A0 C=3DUS, O=3DGeoTrust Inc., CN=3DGeoTrust Global CA<br>=C2=A0=C2=A0 V=
alid from:=C2=A0 5/21/2002 4:00:00 AM<br>=C2=A0=C2=A0 Valid until: 8/21/201=
8 4:00:00 AM<br>=C2=A0=C2=A0 *** WARNING: Certificate signature is INVALID =
***<br>This certificate is already in the CA store.<br><br>X.509 Certificat=
e v3<br>=C2=A0=C2=A0 Issued from: C=3DUS, O=3DGeoTrust Inc., CN=3DGeoTrust =
Global CA<br>=C2=A0=C2=A0 Issued to:=C2=A0=C2=A0 C=3DUS, O=3DGoogle Inc, CN=
=3DGoogle Internet Authority G2<br>=C2=A0=C2=A0 Valid from:=C2=A0 4/1/2015 =
12:00:00 AM<br>=C2=A0=C2=A0 Valid until: 12/31/2017 11:59:59 PM<br>=C2=A0=
=C2=A0 *** WARNING: Certificate signature is INVALID ***<br>This certificat=
e is already in the CA store.<br><br>X.509 Certificate v3<br>=C2=A0=C2=A0 I=
ssued from: C=3DUS, O=3DGoogle Inc, CN=3DGoogle Internet Authority G2<br>=
=C2=A0=C2=A0 Issued to:=C2=A0=C2=A0 C=3DUS, S=3DCalifornia, L=3DMountain Vi=
ew, O=3DGoogle Inc, CN=3D*.<a href=3D"http://google.com" target=3D"_blank">=
google.com</a><br>=C2=A0=C2=A0 Valid from:=C2=A0 4/12/2017 2:19:56 PM<br>=
=C2=A0=C2=A0 Valid until: 7/5/2017 1:29:00 PM<br>This certificate is alread=
y in the AddressBook store.<br><br>No certificate were added to the stores.=
<br></div><br></div>The output from mono TlsTest.exe <a href=3D"https://goo=
gle.com" target=3D"_blank">https://google.com</a> is<br><br><div style=3D"m=
argin-left:40px"><a href=3D"https://google.com" target=3D"_blank">https://g=
oogle.com</a><br>[Subject]<br>=C2=A0 CN=3D*.<a href=3D"http://google.com" t=
arget=3D"_blank">google.com</a>, O=3DGoogle Inc, L=3DMountain View, S=3DCal=
ifornia, C=3DUS<br><br>[Issuer]<br>=C2=A0 CN=3DGoogle Internet Authority G2=
, O=3DGoogle Inc, C=3DUS<br><br>[Not Before]<br>=C2=A0 4/12/2017 4:19:56 PM=
<br><br>[Not After]<br>=C2=A0 7/5/2017 3:29:00 PM<br><br>[Thumbprint]<br>=
=C2=A0 659785A076AA7B417C4282F121B0E9<wbr>9BCD34B183<br><br><br>=C2=A0=C2=
=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 Valid From:=C2=A0 4/12/2017 4:19:56 PM<br=
>=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 Valid Until: 7/5/2017 3:29:00 P=
M<br><br>Error #-2146762486: CERT_E_CHAINING 0x800B010A<br></div><br></div>=
The signature warnings in the certmgr output concern me, but I couldn&#39;t=
 find anything definitive regarding them.<br><br></div>Best regards,<br><br=
></div>Rico</div>

--001a11457c22a25773054d9e382b--

--===============2647323015941846337==
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64
Content-Disposition: inline

X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KTW9uby1saXN0
IG1haWxsaXN0ICAtICBNb25vLWxpc3RAbGlzdHMuZG90Lm5ldApodHRwOi8vbGlzdHMuZG90Lm5l
dC9tYWlsbWFuL2xpc3RpbmZvL21vbm8tbGlzdAo=

--===============2647323015941846337==--