AD.DOUBLECLICK.NET ???

I can confirm that I have a laptop that is having this same problem.
It appears that this behaviour started happening after downloading an app to a Nexus 4 Android phone, on the same network. The app install might just be a false flag or might just be a coincidence, but it was downloaded by a younger sibling from a sketchy add.

It looks like the app that was downloaded was 'Foto Rio'

The same type of certificate error is happening on that phone too.

On the laptop:

• I've check that the DNS servers look right
• tried flushing the DNS caches on the laptop
• Tried looking at the certificates and seeing if any bad certificates got added to the keychain
• Checked that the DNS servers look ok on the router

I didn't see anything that seemed out of place, but then again if I was someone trying to make something malicious, I'd try to make it inconspicuous.

Has anyone else had a similar experience relative to when this problem started popping up for them?

Me too.

If you are getting a request for a client identity certificate as shown in my reply, that is not a problem with the client system — OS X, iOS or otherwise. That's a generic misconfiguration somewhere in Google's advertising and user-tracking network. (Or it's a means to gain a better picture of some of the subscribers.) Cancel out of any of those prompts, and wait for Google to sort it out.

Is it possible that this could be happening if the network was effected by a DNSChanger virus? I've never really dealt with a problem like this before but I got a gut feeling that something may have found a way to maliciously reroute traffic to something that isn't actually ad.doubleclick.net.

TopGunCoder wrote:

Is it possible that this could be happening if the network was effected by a DNSChanger virus? I've never really dealt with a problem like this before but I got a gut feeling that something may have found a way to maliciously reroute traffic to something that isn't actually ad.doubleclick.net.

Sure. It's possible. Many things are possible. Some are more likely than others.

Given the numbers of reports of this problem around the 'net, any common trigger would necessarily involve DNS or routing for a very large part of the Internet — something that was vastly wider than your network — or it was a problem at Google.

Here are some of the other reports from around the 'net:

https://www.reddit.com/r/applehelp/comments/3w15q9/i_keep_getting_asked_about_a_ certificate_from/

https://www.reddit.com/r/applehelp/comments/3w1b3g/popup_asking_for_the_certific ate_for/

https://www.igorkromin.net/index.php/2015/12/09/chrome-and-safari-keep-saying-ad doubleclicknet-requires-a-client-certificate/

But given that Google has now posted a service notice referencing this case, I'm betting on a configuration problem at Google.

Is your particular system or your network somehow (also) re-infested? Could be. But probably not. Check your ARP traffic and your routing, and check your DNS server settings, and make sure your firewall box is current and is secure, your software up to date, etc. Make sure your backups are working and current, too.

I stopped use opendns.com's dns servers and and went back to google's dns servers.

That seams to have stoped the certificate popup warnings for me.

I got the idea when I saw the 2 doubleclick.net certificates in my keychain where both issued by opendns.

Nowvin wrote:

I got the idea when I saw the 2 doubleclick.net certificates in my keychain where both issued by opendns.

I would not expect OpenDNS to be issuing any certificates for Doubleclick.net domains.

But if you're subscribing to some service that intercepts your HTTPS traffic, all bets are off.

I had the same problem today on my laptop and my brother had it happen to him yesterday on his imac and we were both using Google Chrome, but then...my brother went to go watch TV on his apple mini using the Safari browser and it happened on the Safari browser too! So it's happening on both browsers as far as I know. I'm going to clear my history everyday till it gets fixed or figured out.

I Fixed this problem with Bitdefender virus plus it Found 9 malware and browser hijackers and I thought mac could not get effected by things like this!

you can use there free version or purchase there plus edition and I also recommend there safari trafficlight extension to filter out sites that can harm your mac

I bought the plus edition but the free one should work fine

please let me know if this helped

I Fixed this problem with Bitdefender virus plus it Found 9 malware and browser hijackers and I thought mac could not get effected by things like this!

You can install adware, but that response was likely a load of crap that enticed you to purchase their software. It likely only really found a sucker.

Lately Google has been launching adware called Doubleclick.net to try to get people’s information for even more targeted advertising. I kept getting popups that said they wanted to “verify my certificate” which basically is a digital fingerprint of who you are. If you click continue, you are automatically opting in to Google’s Double Click Cookie which tracts everything you do online even more so then before to allow popup adds, etc. Basically they want to advertise more things that are more related to you.

The only way to log out of the cookie is to go to this page on google. https://www.google.com/settings/u/0/ads/authenticated?hl=enSwitch everything to “OFF” and you opt out of their cookie. If you scroll down to the bottom it talks about the Double Click cookie for more information. Once everything is switched off you won’t get any more popup’s from Google asking for your info after about a day or so. (It takes time for them to process your request) Advertising at its finest! 😁

Hi!

How can you explain that I've seen the ad.doubleclick.net caution while entering Youtube just for 2 times? I tapped 'cancel', but now I don't see this. Is it dangerous? Have I check something for the reasons of security?

kechua wrote:

Hi!

How can you explain that I've seen the ad.doubleclick.net caution while entering Youtube just for 2 times? I tapped 'cancel', but now I don't see this. Is it dangerous? Have I check something for the reasons of security?

Google's apparently having some complications for their servers again, or they're looking to even better identify folks through certificates.

In general, you're always being tracked by Google. Your every access to any Google franchise — including YouTube and the various other sites with ads by Google — is monitored, logged and categorized, and then used to generate money for the placement of adverts in front of you. (The certificate they're requesting just means even better tracking of individuals, so why not occasionally ask for it, after all?)

Same for FaceBook and more than a few other entities, for that matter. Those FB "Like" buttons everywhere are tracking you, too.

Welcome to the modern web.