Avast SSL certificates not trusted

Avast Free Antivirus / Premium Security
1

SSL certificate of Avast 2015.10.0.2206 are not trusted by EMET 5.1
Example:
EMET detected that the SSL certificate for “iecvlist.microsoft.com” is not trusted by the rule “MSLiveCA” associated with the domain “login.live.com”.

Certificate Trust check failed:
Application : C:\Program Files\Internet Explorer\iexplore.exe
User Name : W8PROASUS-64\hansmarion
Session ID : 0
PID : 0xAC0 (2752)
TID : 0x21DC (8668)

Certificate details:

[SSL CERTIFICATE]
Subject Name : CN=*.vo.msecnd.net
Issuer CA : CN=avast! Web/Mail Shield Root, O=avast! Web/Mail Shield, OU=generated by avast! antivirus for SSL/TLS scanning
Serial Number : F66D670856630B41A751FD6BF840E9F4
Thumbprint : 4B2C09F65DAAC9C873FE798A1FEA0E951FC80EDE
Signature Alg : sha1RSA
Not Before : 30-10-2014 01:40:20
Not After : 29-10-2016 02:40:20
Public Key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

[ROOTCA CERTIFICATE]
Subject Name : CN=avast! Web/Mail Shield Root, O=avast! Web/Mail Shield, OU=generated by avast! antivirus for SSL/TLS scanning
Issuer CA : CN=avast! Web/Mail Shield Root, O=avast! Web/Mail Shield, OU=generated by avast! antivirus for SSL/TLS scanning
Serial Number : 012940
Thumbprint : 011993DBBD02FA481553D0CA8F33B9F384486B44
Signature Alg : sha1RSA
Not Before : 25-10-2014 16:01:07
Not After : 22-10-2024 16:01:07
Public Key : 3082010A0282010100D5415F86271D1FC4E3EE842DF622E4668EDE76F7AF4CD927FD8134D923836B8ED7929D1926E6F3B0E7E4AEFB61B3E566C02DC935C963A08D78C4F7485365BC78F4E30DFA952B752405DB27FA16299DDAF4626712796C1C927A405320F1F98D84090CB962342FDBEB49010FED42F3A3CCBA8689DFE52D81ED16CD4F7037480FE2D51AB80715F23544743C8BC3988D1E21AD96DD0D2B6EF44622289775F763357F5E7796F996436FA473AA3F438EC8CC39ED1357EE7E4AF14762768D2ECFFCADEE3B26249FDC124E029D990BC1958938C14C35386E9C61117DAE09F1B28F3B62CB7FBE65062FE401DB2591957F39BA2E8FA6CC5E7851520EBC462D0E4AA7C7056D0203010001

2

EMET is a nice tool, but it has a history with SSL certificates problems.
One of the fixes in 5.1 is:

Addresses application compatibility issues between Certificate Trust and 64-bit Internet Explorer.
I would say report it to MS and hope they will fix it soon.
3

Fixed in the latest version of Avast 2208. :slight_smile: