Solve this problem On the client side: 1 - Using Internet explorer 8 2 - Import and install, CA Certificate Chain 3 - Import and install, Certificate Revocation List On the server side: After approve an application for registration certificate Update Certificate Revocation List (CRL)