如果您正在进行一些本地测试，并且您在主机文件中添加了一些别名

127.0.0.1 www.mysite.com

并尝试使用上述任何程序，你将失败。原因是您将为localhost导入一个证书。证书URL不匹配。

在这种情况下，您必须生成一个自签名证书，然后按照上面所述导入它。

如果您正在使用Xampp，则可以轻松地生成正确的证书 c: \ xampp \ apache \ makecert.bat

如何在20个恼人的步骤中让IE8信任自签名证书

Browse to the site whose certificate you want to trust. When told “There is a problem with this website's security certificate.”, choose “Continue to this website (not recommended).” Select Tools➞Internet Options. Select Security➞Trusted sites➞Sites. Confirm the URL matches, and click “Add” then “Close”. Close the “Internet Options” dialog box with either “OK” or “Cancel”. Refresh the current page. When told “There is a problem with this website's security certificate.”, choose “Continue to this website (not recommended).” Click on “Certificate Error” at the right of the address bar and select “View certificates”. Click on “Install Certificate...”, then in the wizard, click “Next”. On the next page select “Place all certificates in the following store”. Click “Browse”, select “Trusted Root Certification Authorities”, and click “OK”. Back in the wizard, click “Next”, then “Finish”. If you get a “Security Warning” message box, click “Yes”. Dismiss the message box with “OK”. Select Tools➞Internet Options. Select Security➞Trusted sites➞Sites. Select the URL you just added, click “Remove”, then “Close”. Now shut down all running instances of IE, and start up IE again. The site’s certificate should now be trusted.

如何安装CA根证书，而不是网站证书:(IE8, Win7)

When you bring up the certificate details you are looking at the website cert, and not the CA cert. The General tab will say, "This certificate cannot be verified..." You need to select the CA by clicking on the Certification Path tab, and selecting the top most cert in the path. It should have a red X icon, and should say, "This CA Root certificate is not trusted because..." Click the View Certificate button, and on this new General tab you should see, "This CA Root is not trusted..." This is the certificate that you want to import into the Trusted Root Certificate Authority.

一旦您导入了CA，您就不需要再导入常规的网站证书，该证书将与您刚刚导入的CA匹配，IE会将一切视为正常工作。您不需要以管理员身份运行IE，也不需要先将站点添加到可信站点。导入完成后需要重新启动IE。

如果你得到一个地址不匹配错误，只允许地址不匹配:

工具，选择“Internet选项” 选择Advanced选项卡 向下滚动屏幕，取消勾选“对证书地址不匹配发出警告”

您可以使用CertMgr将证书添加为受信任的发行者，如果是自签名的，则添加为根证书

CertMgr.exe /add CertificateFileName.cer /s /r localMachine root

请参阅微软的文档:

https://learn.microsoft.com/en-us/windows-hardware/drivers/install/using-certmgr-to-install-test-certificates-on-a-test-computer

下面是我如何让它在IE8中工作的:

Go to the website in question, https://xxx.yyy.com, for instance, Click through until you get to the Certificate error in the browser status line. View the cert, then from the Details tab, select Copy to File. Save to the desktop as xxx.cer, for example, Start, Run, MMC. File, Add/Remove Snap-In, Select Certificates, Click Add, My User Account, then Finish, then OK, Dig down to Trust Root Certification Authorities, Certificates, Right-Click Certificate, Select All Tasks, Import, Select the Save Cert from the Desktop Select Place all Certificates in the following Store, Click Browse, Check the Box that says Show Physical Stores, Expand out Trusted Root Certification Authorities, and select Local Computer there, click OK, Complete the Import, Check the list to make sure it shows up. You will probably need to Refresh before you see it. Exit MMC, Open Browser, select Tools, Delete Browsing History Select all but Inprivate Filtering Data, complete, Go to Internet Options, Content Tab, Clear SSL State, Close browser and reopen and test.