安装证书本身是不够的，相反，您需要安装证书颁发机构的根证书。假设如果您使用Win Server的证书服务，那么它的根证书是在该服务器上安装CS时创建的，将被安装。它必须安装到前面描述的“受信任的根证书颁发机构”。

确保自签名证书与站点URL匹配。如果不这样做，即使在Internet Explorer 8中显式地信任该证书之后，您也将继续得到证书错误(我没有Internet Explorer 7，但Firefox将不管URL不匹配都信任该证书)。

如果这是问题，Internet Explorer 8中的红色“证书错误”框将在您添加证书后显示“不匹配的地址”作为错误。此外，“查看证书”有一个颁发给:标签，显示证书针对哪个URL有效。

我在使用web服务时也遇到了同样的问题。在这里，微软有一个(很长的)演示，告诉您如何在客户端安装东西，基本上说您的自签名证书是可以的。最后，我花了30美元，从Godaddy.com上买了一个完整的证书。

附注:我知道你可以编写错误消息，但出于测试原因，我们不想这样做。

我让它这样工作

Start Internet Explorer running as a user with administrative privileges. Browse to server computer using the computer name (ignore certificate warnings) Click the ”Certificate Error” text in the top of the screen and select ”View certificates” In the Certificate dialog, click Install Certificate -> Next Select Place all certificates in the following store -> Browse Check Show Physical Stores check box Select Trusted Root Certificate Authorities – Local Computer Click OK – Next – Finish – OK Restart Internet Explorer

如果您正在进行一些本地测试，并且您在主机文件中添加了一些别名

127.0.0.1 www.mysite.com

并尝试使用上述任何程序，你将失败。原因是您将为localhost导入一个证书。证书URL不匹配。

在这种情况下，您必须生成一个自签名证书，然后按照上面所述导入它。

如果您正在使用Xampp，则可以轻松地生成正确的证书 c: \ xampp \ apache \ makecert.bat

下面是我如何让它在IE8中工作的:

Go to the website in question, https://xxx.yyy.com, for instance, Click through until you get to the Certificate error in the browser status line. View the cert, then from the Details tab, select Copy to File. Save to the desktop as xxx.cer, for example, Start, Run, MMC. File, Add/Remove Snap-In, Select Certificates, Click Add, My User Account, then Finish, then OK, Dig down to Trust Root Certification Authorities, Certificates, Right-Click Certificate, Select All Tasks, Import, Select the Save Cert from the Desktop Select Place all Certificates in the following Store, Click Browse, Check the Box that says Show Physical Stores, Expand out Trusted Root Certification Authorities, and select Local Computer there, click OK, Complete the Import, Check the list to make sure it shows up. You will probably need to Refresh before you see it. Exit MMC, Open Browser, select Tools, Delete Browsing History Select all but Inprivate Filtering Data, complete, Go to Internet Options, Content Tab, Clear SSL State, Close browser and reopen and test.