AstroSkipper

Congrats! Glad it works for you!

My source must have had the wrong version numbers then. My source wasn't read correctly by me. It's simply much better to use original sources as you did. I didn't find the release info on the homepage anymore and didn't think of the Wayback Machine. Thanks for your research and correction! You can be relied on! Unfortunately, the process of dying of 360Chrome v11 is also in full swing. On VirusTotal (new interface), it no longer works at all, and on GitHub, it does not work properly, either. All in the last few weeks. And here, your post from August (my source! ): I wrote so much in the last days, I misread your post! Frankly and also tragically, I think it won't be long when Chromium-86-based forks don't work properly, either. Greetings from a "blind" man! AstroSkipper

Hello @VistaLover! You are absolutely right! Sorry again for my generalization regarding 360Chrome and DST! Next time, I will clearly define the conditions under which my statements are valid, as I usually do. Just strictly mathematical! To check my statements, I opened the web page https://browserspy.dk/date.php in Advanced Chrome. And here, the local time is displayed correctly. To illustrate this, here is a screenshot of Advanced Chrome's Date and Time Information on BrowserSPY compared to my system time: Advanced Chrome is based on Chrome 49/51/54 48/51/54, which seems to be more compatible with Windows XP, or, simply better ported than 360Chrome v11, and is able to show the correct local time. If there were a bug in Windows XP itself, Advanced Chrome wouldn't show the correct local time. According to this, I believe that neither Windows XP itself nor the POSReady updates are responsible for this error. Anyway, I can only confirm that on Windows XP Professional SP3 fully POSReady updated, the browser 360Chrome v11.0.2031 rebuild 8 (ArcticFoxie) does not show the correct local time if there is DST in the time zone as it is the case here in Germany. Without any claim of correctness, my conclusion is forcibly the following: The browser 360Chrome v11 is based on Chrome 69, which was not originally developed for Windows XP, either, and probably much more incompatible than Chrome 49/52/54 48/51/54. Thus, I suspect that something went wrong when restoring XP compatibility in 360Chrome. In contrast, establishing Vista compatibility apparently went smoothly. All of it only in terms of the local time in combination with DST, of course. Kindest regards, AstroSkipper

Thanks for your detailed clarification! I didn't notice that, indeed. I do not use Windows Vista, and logically I do not read threads in the dedicated Vista forum, either. Of course, I can only confirm that on Windows XP, 360Chrome does not show the correct local time if there is DST in the time zone as it is the case here in Germany. But New Moon 28 does. Therefore, I assume it is rather a problem of Chrome browsers in Windows XP than a bug in Windows XP itself. I read a lot of such posts and articles about Chrome and its DST problems in the internet. It does not seem to be a rare problem. Anyway, thanks again! Kindest regards, AstroSkipper

Certificates - CA and Root Certificates Although Windows XP was abandoned and updates of root certificates were not provided anymore by Microsoft for this OS, we still found ways to update them. And, if we want to install one of our TLS proxies, we have to install a CA certificate to get them working. In both cases, certificates are needed, and this short article is intended to shed some light on this certificate jungle with regards to our TLS proxies. The CA certficate of ProxHTTPSProxy A certificate authority (CA) is a trusted entity that issues digital certificates. These are files that cryptographically link an entity to a public key. Certificate authorities are an important part of the Internet's Public Key Infrastructure (PKI) because they issue the Secure Sockets Layer (SSL) certificates that browsers use to authenticate content sent from web servers. All popular web browsers use web servers' SSL certificates to keep content delivered online secure. They all need to trust certificate authorities to issue certificates reliably. SSL certificates are used in conjunction with the Transport Layer Security (TLS) protocol to encrypt and authenticate data streams for the HTTPS protocol, and are therefore sometimes referred to as SSL/TLS certificates or simply TLS certificates. The first time ProxHTTPSProxy is started, it creates the keys for a certificate authority in its program directory if there is none. This file CA.crt is used for on-the-fly generation of dummy certificates for each visited website which are stored in the subfolder Certs. And, there is a second file called cacert.pem located in ProxHTTPSProxy's program directory. This file cacert.pem contains the currently valid root certificates (will be considered in more detail below) used by the proxy to verify the server connections. Since your browser won’t trust the ProxHTTPSProxy's CA certificate out of the box, you will either need to click through a TLS certificate warning on every domain, or install the CA certificate once so that it is trusted. It has to be installed in the Trusted Root Certification Authority of Windows XP and in some cases additionally in the Certificate Manager of a browser as in the cases of New Moon, Pale Moon, Firefox, and others. The Internet Explorer doesn't possess an own certificates store and uses the Trusted Root Certification Authority of Windows XP. Typically, digital certificates contain data about the entity that issued the certificate and cryptographic data to verify the identity of the entity, including the entity's public key and expiration date for the certificate, as well as the entity's name, contact information, and other information associated with the certified entity. Web servers transmit this information when a browser establishes a secure connection over HTTPS. In doing so, they send to it the certificate and the browser authenticates it using its own root certificate store. The following graphic illustrates the structure of a Certificate Authority as for example GlobalSign: SSL/TLS certificates are based on PKI as mentioned above, and there are a few key parts that need to be in place for the SSL certificate to work: A digital certificate (for example, an SSL/TLS certificate) that proves the website’s identity. A certificate authority that verifies the website and issues the digital certificate. A digital signature that proves the SSL certificate was issued by the trusted certificate authority. A public key that your browser uses to encrypt data sent to the website. A private key that the website uses to decrypt the data sent to it. Here is another graphic to illustrate the role that a certificate authority (CA) plays in the Public Key Infrastructure (PKI): When installing such CA certificates in Windows XP manually, then there is something else to note. It can be of crucial importance whether one installs a root certificate under the account of the Current User or Local Computer. In the first post of my thread, you can find more information on that. Furthermore, exiting ProxHTTPSProxy completely, deleting the old CA.cert file in ProxHTTPSProxy's program directory, and restarting ProxHTTPSProxy will result in the generation of a new CA certificate CA.crt that will be valid for another ten years. In addition, the certificate bundle cacert.pem should be updated, at best regularly. You can do that with the tool cacert Updater Fixed which can be found in the download section under Downloads related to cacert.pem Certificate Update in the first post of this thread. This tool is also included in my program package ProxHTTPSProxy's PopMenu. And, that is the moment to note something very important. Any change to a ProxHTTPSProxy installation regarding the CA certificate or a severe system crash while one of the proxies is running in the background always requires a reset of all dummy certificates in the Certs subfolder. The word "reset" at this point means deleting all certificates that have been created in the Certs folder, manually by the user. The next time the proxy is started correctly, all necessary certificates will be created again when the corresponding websites are accessed. Here are a few screenshots of ProxHTTPSProxy's CA certificate (German edition of Windows XP, sorry!): The Root Certificates of Windows XP In cryptography and computer security, a root certificate is a public key certificate that identifies a root certificate authority (CA). Root certificates are self-signed and form the basis of an X.509-based PKI. Either it has matched Authority Key Identifier with Subject Key Identifier, in some cases there is no Authority Key identifier, then Issuer string should match with Subject string (RFC 5280). For instance, the PKIs supporting HTTPS for secure web browsing and electronic signature schemes depend on a set of root certificates. A certificate authority can issue multiple certificates in the form of a tree structure. A root certificate is the top-most certificate of the tree, the private key which is used to "sign" other certificates. All certificates signed by the root certificate, with the "CA" field set to true, inherit the trustworthiness of the root certificate. A signature by a root certificate is somewhat analogous to "notarizing" identity in the physical world. Such a certificate is called an intermediate certificate or subordinate CA certificate. Certificates further down the tree also depend on the trustworthiness of the intermediates. The following graphic illustrates the role of a root certificate in the chain of trust: The root certificate is usually made trustworthy by some mechanism other than a certificate, such as by secure physical distribution. Root certificates are distributed in Windows XP by Microsoft and located in special certificate stores. These certificate stores may be viewed through the Certificates snap-in Certmgr.msc in the Microsoft Management Console (MMC). You can open the Certificates console focused on the Current User on a Windows XP computer by opening Certmgr.msc in the Run dialog box. Here is a screenshot of what you see running this command (German edition of Windows XP, sorry!): The root certificates of Windows XP can be updated by @heinoganda's Certificate Updater or by my self-created Root Certificate and Revoked Certificate Updaters, in both cases to the most recent ones provided by Microsoft. These updaters can be found in the download section under Downloads related to Root Certificate Updates in the first post of this thread. There is no automatism for this updating. It must be done manually by the user and, if possible, regularly. @heinoganda's Certificate Updater is also included in my program package ProxHTTPSProxy's PopMenu. Greetings from Germany, AstroSkipper

I am talking about downloading a release from the assets on GitHub. Worked fine with palefill 1.21 the last time in the latest release of New Moon 28. I did not say anything about ZIPs from the repos.

Hello @mockingbird! The last time I downloaded files from GitHub all was fine with palefill 1.21 installed. I do not use the WC polyfill add-on from JustOff anymore. Kind regards, AstroSkipper

You're right! Same here! 360Chrome is originally a Chinese browser. There is no multilanguage support. It lacks of localization and can't show the correct local time if there is DST in the time zone. Of course, one could change the system's time zone. But, why should one do that? The correct time zone in Windows itself is much more important. I would recommend to leave the system time zone as it is for the real location. There are other browsers which can do that correctly. Cheers, AstroSkipper

Yep! They did new changes. From now on, 360Chrome v11 don't work with Virustotal's new interface anymore, either.

Thanks for your hints! I do not have important settings in uBlock Origin which are worth to be saved. Therefore, I cleaned my profile deeply before reinstalling uBlock Origin. I use eCleaner to delete all settings in terms of uBlock's entries in abour:config and I delete manually ublock0.sqlite in the subfolder extension-data of my profile folder. But, you are right. All users who have important, individual settings or rules should backup them before cleaning their profile folder. On the dashboard page, there is an item called "Back up to file"" to save settings via uBlock itself. Cheers, AstroSkipper

I've made new modified versions of uBlock Origin Legacy. All is described here: These versions are tested by me and work as they should. Cheers, AstroSkipper

uBlock Origin Legacy modified by @AstroSkipper - Part 2 (obsolete) In the first part about uBlock Origin, I fixed the issue of the incorrect dashboard's display. After that, a member of this forum came up with the idea to replace the file with the available filter lists in my modded version of uBlock Origin due to loading problems that could be observed lately with these lists. A good idea, in my opinion. He replaced the file assets.json in the folder \assets with the one from the current web extension uBlock0_1.44.5b0.firefox.signed.xpi in my corrected version uBlock0_1.16.4.30.firefox-legacy-mod-by-@AstroSkipper.xpi. Thanks for that to @nicolaasjan! I had a closer look and came to the conclusion that in case of such a modification not only this one file but also all related filter lists should be replaced in the folders \assets\thirdparties and \assets\ublock, for consistency reasons. Freely according to the motto "Who says A, must also say B" (German saying! ). Furthermore, @VistaLover drew my attention to an unofficial, more recent version of uBlock Origin Legacy with the version number 1.16.4.31b2: This xpi file has already been updated with regards to its filter lists and is now the basis of my new, modified version of uBlock Origin Legacy. Here is the complete changelog of what I have modified: The file dashboard.css fixed as described in my post "uBlock Origin Legacy modified by @AstroSkipper - Part 1". The file assets.json replaced by the most recent one. Missing filter lists in the folders thirdparties and ublock added. Existing filter lists in the folders thirdparties and ublock updated. This is a screenshot of the location inside the xpi file where all filter lists related files can be found: And, here is the download link to my new, fixed version of uBlock Origin Legacy 1.16.4.31b2, credits to @nicolaasjan and @VistaLover: https://www.mediafire.com/file/rv4cdfsm9ddqq30/uBlock0_1.16.4.31b2.firefox-legacy-enhanced-mod-by-%40AstroSkipper.xpi/file I compared this new modded version to the old one, and it works really great. The updating of the filter lists are now much faster than before, meaning flawlessly. No eternal waiting for update end! But that's not all! And again it was @VistaLover, who pointed me to another solution for fixing the glitch in the dashboard page. Thanks for that again, @VistaLover! In the Pale Moon Forum, a solution is described how to fix this glitch using the advanced settings of uBlock Origin: https://forum.palemoon.org/viewtopic.php?f=46&t=28882 Open the dashboard page, under the item Settings, enable the option "I am an advanced user", click on the icon at the end of this option, and change the value for uiStyles from unset to font-family: sans-serif. That's all! From now on, the dashboard page works as it should. And, here is the next download link of uBlock Origin Legacy 1.16.4.31b2, only modified in terms of the filter lists, credits to @nicolaasjan and @VistaLover: https://www.mediafire.com/file/zy1dpmtv2py9tws/uBlock0_1.16.4.31b2.firefox-legacy-filter-lists-mod-by-%40AstroSkipper.xpi/file Furthermore, two posts with all deeper information provided by @VistaLover: https://msfn.org/board/topic/182647-my-browser-builds-part-3/?do=findComment&comment=1226700 and https://msfn.org/board/topic/182647-my-browser-builds-part-3/?do=findComment&comment=1226717 Additionally, a link to the wiki of uBlock Origin's advanced settings: https://github.com/gorhill/uBlock/wiki/Advanced-settings It seems to be the case that in the next releases of roytam1's UXP browsers the glitch issue in the dashboard page will be presumably fixed. If that is the case, all modifications due to the glitch issue won't be necessary anymore. But, I think they won't harm, either. And finally, an important recommendation to get a new installation of uBlock Origin Legacy working properly and flawlessly. After uninstalling the previous version (yes, the old version should be uninstalled), delete all remnants via about:config and in your profile folder! The remnants of uBlock Origin which can be viewed via about:config can be easily removed by the extension eCleaner. And in your profile folder, there is a file in the subfolder extension-data called ublock0.sqlite which has to be removed manually. Delete the browser cache, too! If doing so, the updating of the filter lists will work like a charme after installing one of my modified versions. All users who have important, individual settings or rules should backup them before cleaning their profile folder. On the dashboard page, there is an item called "Back up to file"" to save the user's settings via uBlock itself. Cheers, AstroSkipper

Update notification! My favourite registry editor Registry Workshop has been updated and its current version is now 5.1.0. Link: http://www.torchsoft.com/en/rw_information.html It is still supported in Windows XP, but it's commercial. This program is definitely worth its money. You can try it 30 days for free. Here are the download links of the English and German version 5.1.0 (other language versions are also available): English version: http://www.torchsoft.com/download/RegistryWorkshop.exe German version: http://www.torchsoft.com/download/RegistryWorkshop_deu.exe Cheers, AstroSkipper

My essential tools for solving problems in Windows XP — Part 3 — Text, hex, resource, and registry editors Notepad++: Notepad++ is a text and source code editor for use with Microsoft Windows. It supports tabbed editing, which allows working with multiple open files in a single window. For me, one of the best text editors ever! The last version which has been compatible with Windows XP is Notepad++ 7.9.2. Download link: https://notepad-plus-plus.org/downloads/v7.9.2/ HxD: HxD is a carefully designed and fast hex editor which, additionally to raw disk editing and modifying of main memory (RAM), handles files of any size. The easy to use interface offers features such as searching and replacing, exporting, checksums/digests, insertion of byte patterns, a file shredder, concatenation or splitting of files, statistics and much more. HxD is free of charge for private and commercial use. The last version which is compatible with Windows XP is HxD 2.5.0.0. Download links: Installer version: https://mh-nexus.de/downloads/HxDSetup.zip Portable version: https://mh-nexus.de/downloads/HxDPortableSetup.zip WinHex - Computer Forensics & Data Recovery Software, Hex Editor & Disk Editor: WinHex is in its core a universal hexadecimal editor, particularly helpful in the realm of computer forensics, data recovery, low-level data processing, and IT security. An advanced tool for everyday and emergency use: inspect and edit all kinds of files, recover deleted files or lost data from hard drives with corrupt file systems or from digital camera cards. Features depend on the license type, among them: Disk editor for hard disks, floppy disks, CD-ROM & DVD, ZIP, Smart Media, Compact Flash, ... Native support for FAT12/16/32, exFAT, NTFS, Ext2/3/4, Next3®, CDFS, UDF Built-in interpretation of RAID systems and dynamic disks Various data recovery techniques RAM editor, providing access to physical RAM and other processes' virtual memory Data interpreter, knowing 20 data types Editing data structures using templates (e.g. to repair partition table/boot sector) Concatenating and splitting files, unifying and dividing odd and even bytes/words Analyzing and comparing files Particularly flexible search and replace functions Disk cloning (under DOS with X-Ways Replica) Drive images & backups (optionally compressed or split into 650 MB archives) Simple scripting 256-bit AES encryption, checksums, CRC32, hashes (MD5, SHA-1, ...) Erase (wipe) confidential files securely, hard drive cleansing to protect your privacy Import all clipboard formats, incl. ASCII hex values Convert between binary, hex ASCII, Intel Hex, and Motorola S Character sets: ANSI ASCII, IBM ASCII, EBCDIC, (Unicode) Instant window switching. Printing. Random-number generator. Supports files of any size. Very fast. Easy to use. Extensive program help. More The latest version WinHex 20.6 is compatible with Windows XP. The program do not need any installation. It's portable. You can try out WinHex for free, it's not limited in time, but functionally restricted. Download links: Portable version: https://www.x-ways.net/winhex.zip User manual: https://x-ways.net/winhex/manual.pdf Resource Hacker: Resource Hacker is a resource editor for 32bit and 64bit Windows® applications. It's both a resource compiler (for *.rc files), and a decompiler - enabling viewing and editing of resources in executables (*.exe; *.dll; *.scr; etc) and compiled resource libraries (*.res, *.mui). While Resource Hacker™ is primarily a GUI application, it also provides many options for compiling and decompiling resources from the command-line. I think Resource Hacker is one of the best in this category. The last version compatible with Windows XP is Resource Hacker 5.1.8. Unfortunately, the installer (exe file) of this version doesn't work anymore under Windows XP, but the portable version (zip file) does. Resource Hacker 5.1.7 is the last XP-compatible installer release. Resource Hacker 5.1.8 is the last XP-compatible portable release. Download links: Resource Hacker 5.1.7 installer: https://web.archive.org/web/20200902234826/http://www.angusj.com/resourcehacker/reshacker_setup.exe Resource Hacker 5.1.8 portable: https://web.archive.org/web/20230629014912/http://www.angusj.com/resourcehacker/resource_hacker.zip Registrar Registry Manager: Registrar Registry Manager 9.20 is a registry editor which is still supported in Windows XP. Hompage: https://www.resplendence.com/registrar There is a Free Home Edition: https://www.resplendence.com/download/RegistrarHomeV9.exe and a commercial Professional Edition. Registry Workshop: My favourite registry editor is Registry Workshop (current version is 5.1.0). Link: http://www.torchsoft.com/en/rw_information.html It is still supported in Windows XP, but it's commercial. This program is definitely worth its money. You can try it 30 days for free. Here are the download links of the English and German version 5.1.0 (other language versions are also available): English version: http://www.torchsoft.com/download/RegistryWorkshop.exe German version: http://www.torchsoft.com/download/RegistryWorkshop_deu.exe PCRegedit: PCRegedit is a Linux Live CD based, easy-to-use tool to create, delete, edit the Windows registry key-values due to your needs without booting from Windows. You can use it to fix Windows Registry key-values when it is maliciously altered by virus, when you are going to edit key-values, inaccessible in your Windows system, or when it simply doesn't start anymore. In a nutshell, using PCRegedit, you can get full access to your Windows registry from outside if necessary. Download link: https://raymondcc.r.worldssl.net/PCRegedit-51.iso A list of all parts of my My essential tools for solving problems in Windows XP can be found in my post of Additional Resources. Link: https://msfn.org/board/topic/183498-general-and-specific-solutions-for-problems-regarding-auwumu-in-windows-xp/?do=findComment&comment=1216513

Very good find! Thanks for your deeper insight and information about the latest developments! You are definitely the expert of repos and commits. I've just tested this setting of uiStyles and it works perfectly. Now, I understand why you didn't observe this issue in your browsers. When I was thinking about a solution for this glitch some weeks ago, I also looked in the advanced settings of uBlock Origin. Unfortunately, I didn't pursue this further because I didn't look at the individual options more closely due to the fact that I didn't know their syntax, either. A look at this page would have greatly simplified my search for a solution: https://github.com/gorhill/uBlock/wiki/Advanced-settings Anyway, we have now different solutions to solve this glitch of uBlock Origin's dashboard page, and I have extended my knowledge about CSS.

You're welcome!

That should not be a problem at all. If you do not understand what I have written, use an online translation service like DeepL! DeepL Translator In any case, it would be desirable not to spread information that does not correspond to the facts. This only confuses others and is in no way helpful.

Update notification! The article "Mypal 68 on low performance systems with an amount less than 2 GB of RAM" has been updated with regard to a new recommended setting of the variable dom.moduleScripts.enabled. Cheers, AstroSkipper

Did you read my short clarification? There isn't or hasn't been any automatical reset or forced reset of these dummy certificates. Resetting these certificates in the folder Certs always means to delete all of them manually. It doesn't matter which version of ProxHTTPSProxy.

I think I know the reason: the setting you shared (dom.moduleScripts.enabled false) breaks uBlock Origin. It also crashes the browser eventually (I think it's because of uBO as well). Without that setting set to false, I can use uBlock Origin without any problems (But the version is 1.42.4, while it's 1.44.4 in my main PC's browser Firefox 105). Addition: Oh wait, it's because Mypal doesn't support auto-updating of extensions and I installed it before the update. If I reinstall it, then it should work fine too. Unfortunately, you are on the wrong way. It's more hardware related. As I already said, I will post about these problems very soon. @SC7601! I have to correct my statement. You are right! I have retested uBlock Origin 1.44.4 in Mypal 68 and can confirm your observation. Setting the variable dom.moduleScripts.enabled to false breaks the most recent version of uBlock Origin 1.44.4 in Mypal 68.12.5b. This setting was helpful in getting the new interface of VirusTotal to work in previous versions of Mypal 68. But in the latest version, Mypal 68.12.5b, it has no positive effect anymore and has become useless. Therefore, I recommend to set the variable dom.moduleScripts.enabled back to its default value of true. Kind regards, AstroSkipper

I think I know the reason: the setting you shared (dom.moduleScripts.enabled false) breaks uBlock Origin. It also crashes the browser eventually (I think it's because of uBO as well). Without that setting set to false, I can use uBlock Origin without any problems (But the version is 1.42.4, while it's 1.44.4 in my main PC's browser Firefox 105). Addition: Oh wait, it's because Mypal doesn't support auto-updating of extensions and I installed it before the update. If I reinstall it, then it should work fine too. Unfortunately, you are on the wrong way. It's more hardware related. As I already said, I will post about these problems very soon. No, as far as I know, and I don't need that feature, either. But, as I posted above, ImTranslator is an interesting extension for translating and offers many features. Each to their own! I love the good and simple ones, and that means in my case Simple Translate.

@SC7601! Using ProxHTTPSProxy with browsers that already support TLS 1.2 or 1.3 is not the purpose of it. Generally, these TLS proxies are needed to access Windows Update or Microsoft Update, for example. Or, for updating programs that require the old Internet Explorer. Or, for email programs that cannot set up such connections themselves, e.g. eM Client or Eudora, and so on. But, all this has nothing to do with the fact that you actually just wanted to test my software package on a time-period correct system. Didn't it? BTW, you can test it with browsers already supporting TLS 1.2 and 1.3, too. Anyway, it was your suggestion! Cheers, AstroSkipper

You're welcome! OT: BTW, what about your offer weeks ago? uBlock Origin is my favourite ad blocker extension. Unfortunately, there is a real problem with its compatibility, Therefore, I can't use the more recent ones in Mypal 68 on my old system. I'll post about these problems very soon. The extension Simple Translate is easy to use and works perfectly. Of course, I know the extension ImTranslator as well. I use it in the New Moon 28. The quality of the translations is better in Simple Translate, though, and ImTranslator is much too bloated for my taste. Basically, ImTranslator is an interesting extension for translating and offers many features. Anyway, to each their own! I recommend Simple Translate: https://msfn.org/board/topic/183657-mypal-68-in-windows-xp-custom-buttons-and-extensions/?do=findComment&comment=1225646 The advantage of Adblocker Ultimate is that it works like a charme in Mypal 68 from the very first, and its most recent version is compatible with my system. BTW, most of the ad blocker use the same filters like Adguard's lists, Easylist, Fanboy's lists, and so on. uBlock Origin does it, too. Kind regards, AstroSkipper

@ward201185! Such comments without any indication of which operating system you are referring to are useless to other readers. Only the initiated can see that you actually mean Windows 2000. On the subject of dummy certificates in ProxHTTPSProxy's Certs subfolder, a brief clarification: Cheers, AstroSkipper

Just a reminder! Any changes to an installation of ProxHTTPSProxy or HTTPSProxy, especially the installation of a new CA certificate, or severe crashes of the system while one of the proxies was running in the background, always requires a reset of all dummy certificates in the Certs subfolder. The word "reset" at this point means deleting all certificates manually that have been created in the Certs folder. The next time the proxy is started correctly, all necessary certificates will be created again when the corresponding websites are accessed. Renaming or saving the Certs folder is completely unnecessary. Cheers, AstroSkipper