Google-chrome – Same version of Chrome, two different behavior regarding sha1 deprecation

The reason of this behavior is explained in Chrome's error message: that website uses HSTS. HSTS enforces more strict certificate policy for the website.

To make Chrome forget HSTS information for this site: ^[source]

1. In the address bar, type chrome://net-internals/#hsts
2. Type the domain name in the text field below Delete domain
3. Click the Delete button.
4. Type the domain name in the text field below Query domain
5. Click the Query button.
6. Your response should be Not found

If anyone has the same problem, here is the solution and it should work on Windows 7, 8 and 10.

1. Create a windows management console file. Start -> Run -> mmc.exe

2. In the console window: File -> Add/Remove Snap-in...

3. Choose Certificates snap-in and choose to manage certificates for My user account in the next window.

4. Back in the Add or Remove Snap-ins dialog, choose Group Policy Object Editor and Add it to the Console Root. Leave Group Policy Object set to LocalComputer in the next dialog and click Finish.

5. Click OK to leave the Add or Remove Snap-ins dialog.

At this point you should be looking at a Console window like this:

Now, import your certificates.

1. Expand the Certificates snap-in and click to Personal. Then right-click on the middle pane and choose All Tasks -> Import.... The Certificate Import Wizard will appear. Just import your user's certificate without changing any of the default settings.

2. Expand the Trusted Root Certification Authorities and click on Certificates. Again, click on the middle pane and choose All Tasks -> Import.... Import your CA's certificate without changing any of the default settings.

Now to the interesting part...

Back to the Console Root, navigate under Local Computer Policy snap-in to Computer Configuration -> Windows Settings -> Security Settings -> Public Key Policies. You should see a window like this:

Double click on Certificate Path Validation Settings. Check Define these policy settings and select the settings as in the picture below.

Then, click on Select Certificate Purposes and make sure your intended purposes are included (Client Authentication and Server Authentication were the ones I needed.). Click Apply and close the Console window. You will be asked if you want to save your settings. You may choose to do so if you want to save your configuration for others to re-use.

Make sure to restart Chrome or IE in order for the changes to take effect.