See this MS artcile
You cannot install some updates or programs
http://support.microsoft.com/kb/822798/en-us
Really focus on the certificates section (method 8).
In your I. E. browser, select Tools >Internet Options > Advanced Tab > (scroll down thru
the list)
These are "some" of the items that I do have CHECKed (selected):
Under HTTP 1.1 settings --
Use HTTP 1.1 (ON / Selected)
+ Enable / check to use HTTP 1.1 with proxy servers **** <<----
and under Security :
Clear (un-check) the check box next to "Check for server certificate revocation" . ( *OFF* )
Use SSL 2.0 (ON / selected)
Use SSL 3.0 (ON)
Internet Explorer > main menu /Tools/Internet Options >
Security Tab/ click on green icon Trusted Sites/click Sites button.
Look very closely at line that says:
"Require server verification (https

for all sites in this zone" to *clear* the selection.
(e.g. You want that to be un-checked (un-ticked)).
In the "Add this Web site to the zone:" field, add these entries to list of "Trusted Sites" --
type
http://*.download.windowsupdate.com (click Add)
http://windowsupdate.microsoft.com
http://update.microsoft.com
Click OK. Apply changes to IE browser.
Then re-try Windows Update.
HTH
--
Maurice N
MVP Windows - Shell / User
-----
Gary6 wrote:
> Hello again,
>
> Your answer to my post would normally be essential, but unfortunately
> my clock, time zone, and date is up to the minute and accurate. I am
> still getting expired certificates when viewing the certificate, and
> am very afraid to download anything.
>
> I tried to contact Microsoft some time ago, but they would not help
> me. This is so frustrating that we are going to go MaC yet! I have
> OEM XP disk, but ordered SP2 disk directly from Microsoft. Microsoft
> told me to go to computer mfg. or dealer!
>
> I also phoned Verisign and they did not approve of expired
> certificates as being safe.
>
> Thank you for any help, we do appreciate it.
>
> Gary 6.
>
>> Check your computer's time, date, and time zone settings, Gary.
>> --
>> ~Robear Dyer (PA Bear)
>> MS MVP-Windows (IE/OE, Shell/User, Security), Aumha.org VSOP,
>> DTS-L.org
>>
>> Gary6 wrote:
>>> I will not download any security upgrades to WIN XP SP2 due to the
>>> fact that the Certificates signed by Microsoft expired months ago.
>>> Why doesn't Microsot keep these Certificates up to date so we can
>>> trust them??