X
Tap here to go to the mobile version of the site.

Support Forum

Firefox invalid security certificate page missing "add exemption"

Posted

Suddenly two valid websites that I frequent are now considered by Firefox to have invalid security certificates, Airbnb.com and sanjoseca.gov (the City of San Jose's official website). The return page from Firefox states the certificates are invalid but NO "ADD EXEMPTION" is listed on the page as an option.

I have waited more than 10 minutes to upload the image and it still hasn't loaded. It has the Technical Details, and the "Get me out of here link" but no "add exemption" link.

I use Airbnb.com frequently and I need a stable interface with them. I contacted both companies and they both told me that they were not aware that their certificate wasn't being recognized by Firefox and that I should download and use Google Chrome instead.

This isn't the first time I've had issues with Firefox. Frequently when applying for a job online, the application forms are not properly exhibited in Firefox but are in Internet Explorer. This makes applying for work very difficult!

It's been 15 minutes and still the image hasn't loaded. I can't wait any longer. Please tell me how to fix this glitch. Thank you.

Suddenly two valid websites that I frequent are now considered by Firefox to have invalid security certificates, Airbnb.com and sanjoseca.gov (the City of San Jose's official website). The return page from Firefox states the certificates are invalid but NO "ADD EXEMPTION" is listed on the page as an option. I have waited more than 10 minutes to upload the image and it still hasn't loaded. It has the Technical Details, and the "Get me out of here link" but no "add exemption" link. I use Airbnb.com frequently and I need a stable interface with them. I contacted both companies and they both told me that they were not aware that their certificate wasn't being recognized by Firefox and that I should download and use Google Chrome instead. This isn't the first time I've had issues with Firefox. Frequently when applying for a job online, the application forms are not properly exhibited in Firefox but are in Internet Explorer. This makes applying for work very difficult! It's been 15 minutes and still the image hasn't loaded. I can't wait any longer. Please tell me how to fix this glitch. Thank you.

Additional System Details

Installed Plug-ins

  • Adobe PDF Plug-In For Firefox and Netscape 11.0.8
  • NPRuntime Script Plug-in Library for Java(TM) Deploy
  • Next Generation Java Plug-in 11.40.2 for Mozilla browsers
  • DRM Store Netscape Plugin
  • DRM Netscape Network Object
  • Shockwave Flash 16.0 r0
  • Adobe Shockwave for Director Netscape plug-in, version 12.1.5.155
  • 5.1.30514.0
  • NPWLPG
  • Npdsplay dll
  • Windows Presentation Foundation (WPF) plug-in for Mozilla browsers

Application

  • Firefox 37.0.2
  • User Agent: Mozilla/5.0 (Windows NT 5.1; rv:37.0) Gecko/20100101 Firefox/37.0
  • Support URL: https://support.mozilla.org/1/firefox/37.0.2/WINNT/en-US/

Extensions

  • Java Quick Starter 1.0 (jqs@sun.com) (Inactive)
  • Microsoft .NET Framework Assistant 0.0.0 ({20a82645-c095-46ed-80e3-08825760534b}) (Inactive)
  • Norton Toolbar 2014.7.12.7 ({2D3F3651-74B9-4795-BDEC-6DA2F431CB62}) (Inactive)

Javascript

  • incrementalGCEnabled: True

Graphics

  • adapterDescription: ATI Radeon HD 3200 Graphics
  • adapterDescription2:
  • adapterDeviceID: 0x9610
  • adapterDeviceID2:
  • adapterDrivers: ati2dvag
  • adapterDrivers2:
  • adapterRAM: Unknown
  • adapterRAM2:
  • adapterSubsysID: 02e21028
  • adapterSubsysID2:
  • adapterVendorID: 0x1002
  • adapterVendorID2:
  • direct2DEnabled: False
  • direct2DEnabledMessage: [u'tryNewerDriver', u'9.6']
  • directWriteEnabled: False
  • directWriteVersion: 0.0.0.0
  • driverDate: 11-12-2008
  • driverDate2:
  • driverVersion: 8.560.0.0
  • driverVersion2:
  • info: {u'AzureCanvasBackend': u'skia', u'AzureFallbackCanvasBackend': u'cairo', u'AzureContentBackend': u'cairo', u'AzureSkiaAccelerated': 0}
  • isGPU2Active: False
  • numAcceleratedWindows: 0
  • numAcceleratedWindowsMessage: [u'tryNewerDriver', u'9.6']
  • numTotalWindows: 1
  • webglRendererMessage: [u'tryNewerDriver', u'9.6']
  • windowLayerManagerRemote: True
  • windowLayerManagerType: Basic

Modified Preferences

Misc

  • User JS: No
  • Accessibility: No
cor-el
  • Top 10 Contributor
  • Moderator
17479 solutions 157964 answers

Both websites work fine here.

Open this chrome URI by pasting or typing this URI in the location/address bar to open the "Add Security Exception" window and check the certificate:

  • chrome://pippki/content/exceptionDialog.xul

In the location field type/paste the URL of the website

  • retrieve the certificate via the "Get certificate" button
  • inspect the certificate via the "View..." button

You can try these steps in case of issues with web pages:

You can reload web page(s) and bypass the cache to refresh possibly outdated or corrupted files.

  • Hold down the Shift key and left-click the Reload button
  • Press "Ctrl + F5" or press "Ctrl + Shift + R" (Windows,Linux)
  • Press "Command + Shift + R" (Mac)

Clear the cache and remove cookies only from websites that cause problems.

"Clear the Cache":

  • Firefox/Tools > Options > Advanced > Network > Cached Web Content: "Clear Now"

"Remove Cookies" from sites causing problems:

  • Firefox/Tools > Options > Privacy > "Use custom settings for history" > Cookies: "Show Cookies"

Start Firefox in Safe Mode to check if one of the extensions (Firefox/Tools > Add-ons > Extensions) or if hardware acceleration is causing the problem.

  • Switch to the DEFAULT theme: Firefox/Tools > Add-ons > Appearance
  • Do NOT click the Reset button on the Safe Mode start window
Both websites work fine here. Open this chrome URI by pasting or typing this URI in the location/address bar to open the "Add Security Exception" window and check the certificate: * chrome://pippki/content/exceptionDialog.xul In the location field type/paste the URL of the website * retrieve the certificate via the "Get certificate" button * inspect the certificate via the "View..." button ---- You can try these steps in case of issues with web pages: You can reload web page(s) and bypass the cache to refresh possibly outdated or corrupted files. *Hold down the Shift key and left-click the Reload button *Press "Ctrl + F5" or press "Ctrl + Shift + R" (Windows,Linux) *Press "Command + Shift + R" (Mac) Clear the cache and remove cookies only from websites that cause problems. "Clear the Cache": *Firefox/Tools > Options > Advanced > Network > Cached Web Content: "Clear Now" "Remove Cookies" from sites causing problems: *Firefox/Tools > Options > Privacy > "Use custom settings for history" > Cookies: "Show Cookies" Start Firefox in <u>[[Safe Mode|Safe Mode]]</u> to check if one of the extensions (Firefox/Tools > Add-ons > Extensions) or if hardware acceleration is causing the problem. *Switch to the DEFAULT theme: Firefox/Tools > Add-ons > Appearance *Do NOT click the Reset button on the Safe Mode start window *https://support.mozilla.org/kb/Safe+Mode *https://support.mozilla.org/kb/Troubleshooting+extensions+and+themes

Question owner

sandid2260 said

Suddenly two valid websites that I frequent are now considered by Firefox to have invalid security certificates, Airbnb.com and sanjoseca.gov (the City of San Jose's official website). The return page from Firefox states the certificates are invalid but NO "ADD EXEMPTION" is listed on the page as an option. I have waited more than 10 minutes to upload the image and it still hasn't loaded. It has the Technical Details, and the "Get me out of here link" but no "add exemption" link. I use Airbnb.com frequently and I need a stable interface with them. I contacted both companies and they both told me that they were not aware that their certificate wasn't being recognized by Firefox and that I should download and use Google Chrome instead. This isn't the first time I've had issues with Firefox. Frequently when applying for a job online, the application forms are not properly exhibited in Firefox but are in Internet Explorer. This makes applying for work very difficult! It's been 15 minutes and still the image hasn't loaded. I can't wait any longer. Please tell me how to fix this glitch. Thank you.

Thanks Cor-El for your reply and suggestions. Tried everything you mentioned and Firefox is not accepting the website's certificates. Still tells me they are invalid and still doesn't show the "add exemption" choice!

The image finally uploaded - yeah! Going crazy now....

''sandid2260 [[#question-1058549|said]]'' <blockquote> Suddenly two valid websites that I frequent are now considered by Firefox to have invalid security certificates, Airbnb.com and sanjoseca.gov (the City of San Jose's official website). The return page from Firefox states the certificates are invalid but NO "ADD EXEMPTION" is listed on the page as an option. I have waited more than 10 minutes to upload the image and it still hasn't loaded. It has the Technical Details, and the "Get me out of here link" but no "add exemption" link. I use Airbnb.com frequently and I need a stable interface with them. I contacted both companies and they both told me that they were not aware that their certificate wasn't being recognized by Firefox and that I should download and use Google Chrome instead. This isn't the first time I've had issues with Firefox. Frequently when applying for a job online, the application forms are not properly exhibited in Firefox but are in Internet Explorer. This makes applying for work very difficult! It's been 15 minutes and still the image hasn't loaded. I can't wait any longer. Please tell me how to fix this glitch. Thank you. </blockquote> Thanks Cor-El for your reply and suggestions. Tried everything you mentioned and Firefox is not accepting the website's certificates. Still tells me they are invalid and still doesn't show the "add exemption" choice! The image finally uploaded - yeah! Going crazy now....
cor-el
  • Top 10 Contributor
  • Moderator
17479 solutions 157964 answers

What does it say under the Technical details if you expand this section?

You can open this chrome URI by pasting or typing this URI in the location/address bar to open the "Add Security Exception" window and check the certificate:

  • chrome://pippki/content/exceptionDialog.xul

In the location field type/paste the URL of the website

  • retrieve the certificate via the "Get certificate" button
  • inspect the certificate via the "View..." button and check details like the issuer

You can inspect more details in the Details tab.

What does it say under the Technical details if you expand this section? You can open this chrome URI by pasting or typing this URI in the location/address bar to open the "Add Security Exception" window and check the certificate: * chrome://pippki/content/exceptionDialog.xul In the location field type/paste the URL of the website * retrieve the certificate via the "Get certificate" button * inspect the certificate via the "View..." button and check details like the issuer You can inspect more details in the Details tab.

Question owner

Dear cor-el,

Your solution still does not work. My version of Firefox is not allowing me to create an exception for Airbnb.com no matter how many times I check for the certificate.

Under the Technical Details it states:

www.airbnb.com uses an invalid security certificate. The certificate is not trusted because the issuer certificate is unknown. (Error code: sec_error_unknown_issuer).

On the error page, there is no :" I understand the risks" link to allow me to add an exemption.

I have gone to the Firefox Tools --> Options --> Certificate --> View Certificates and have manually added multiple times an exception for Airbnb.com and Firefox still won't allow me access.

Now Firefox is also messing up the user html interface for my bank. The login page is normal, but the next page and all subsequent pages are nothing by text documents...no html user interface at all. I am not incapable of tracking banking activity.

I don't know why Firefox has decided to mess up 7 of my most used websites but it does. I have thought to reinstall Firefox but that would mean losing all of my bookmarks. I have tried to Copy & Paste the bookmark's individual website addresses and the all of the bookmark folders with their web addresses, but Firefox won't allow me to paste that information into a Word Doc, Excel Doc, Google Doc, etc.

I think I'm done with this product. It has worked wonderfully for years and now it is dying. I cannot waste anymore time on a product that won't work. I'm using Windows XP that is one of the most stable operating systems I've used next to Windows NT but maybe all your upgrade for Firefox renders it useless for me. I just don't know. Firefox worked just fine 3 weeks ago and then it went crazy.

Dear cor-el, Your solution still does not work. My version of Firefox is not allowing me to create an exception for Airbnb.com no matter how many times I check for the certificate. Under the Technical Details it states: www.airbnb.com uses an invalid security certificate. The certificate is not trusted because the issuer certificate is unknown. (Error code: sec_error_unknown_issuer). On the error page, there is no :" I understand the risks" link to allow me to add an exemption. I have gone to the Firefox Tools --> Options --> Certificate --> View Certificates and have manually added multiple times an exception for Airbnb.com and Firefox still won't allow me access. Now Firefox is also messing up the user html interface for my bank. The login page is normal, but the next page and all subsequent pages are nothing by text documents...no html user interface at all. I am not incapable of tracking banking activity. I don't know why Firefox has decided to mess up 7 of my most used websites but it does. I have thought to reinstall Firefox but that would mean losing all of my bookmarks. I have tried to Copy & Paste the bookmark's individual website addresses and the all of the bookmark folders with their web addresses, but Firefox won't allow me to paste that information into a Word Doc, Excel Doc, Google Doc, etc. I think I'm done with this product. It has worked wonderfully for years and now it is dying. I cannot waste anymore time on a product that won't work. I'm using Windows XP that is one of the most stable operating systems I've used next to Windows NT but maybe all your upgrade for Firefox renders it useless for me. I just don't know. Firefox worked just fine 3 weeks ago and then it went crazy.
cor-el
  • Top 10 Contributor
  • Moderator
17479 solutions 157964 answers

Did you check who is the issuer of the certificate via the method I posted above by opening the chrome URL via the location/address bar?

  • chrome://pippki/content/exceptionDialog.xul

You can click the View button to open the certificate viewer window.

It is not recommended to add a permanent exception in cases like this, so only use it to inspect the certificate.

Check the date and time and time zone in the clock on your computer: (double) click the clock icon on the Windows Taskbar.

Did you check who is the issuer of the certificate via the method I posted above by opening the chrome URL via the location/address bar? *chrome://pippki/content/exceptionDialog.xul You can click the View button to open the certificate viewer window. It is not recommended to add a permanent exception in cases like this, so only use it to inspect the certificate. Check the date and time and time zone in the clock on your computer: (double) click the clock icon on the Windows Taskbar. *https://support.mozilla.org/kb/Secure+Connection+Failed

Helpful Reply

Dear cor-el,

The clock, time and time zone are correct. Yes, I have read the details and no there is no issuer of a certificate. According to Airbnb, their certificate is current and up to 2 or so weeks ago, I had no trouble accessing Airbnb, Fidelity, Yahoo, City of San Jose and several other websites that I use regularly.

I have attached 2 PNG's showing you what the return pages look like. I have done every suggestion you have mentioned meticulously and still Firefox isn't working. I have run malware scans, anti-virus scans, defragged my computer, compressed files and still Firefox won't work properly. In fact, it hasn't worked properly since I uploaded the most recent Firefox updates.

Dear cor-el, The clock, time and time zone are correct. Yes, I have read the details and no there is no issuer of a certificate. According to Airbnb, their certificate is current and up to 2 or so weeks ago, I had no trouble accessing Airbnb, Fidelity, Yahoo, City of San Jose and several other websites that I use regularly. I have attached 2 PNG's showing you what the return pages look like. I have done every suggestion you have mentioned meticulously and still Firefox isn't working. I have run malware scans, anti-virus scans, defragged my computer, compressed files and still Firefox won't work properly. In fact, it hasn't worked properly since I uploaded the most recent Firefox updates.

Modified by sandid2260

cor-el
  • Top 10 Contributor
  • Moderator
17479 solutions 157964 answers

What do you see if you click the View button to open the certificate viewer?

What do you see if you click the View button to open the certificate viewer?

Question owner

Sorry for uploading the same image twice. Here's what the certificate viewer says: Could not verify this certificate because the user is unknown. See image.

Sorry for uploading the same image twice. Here's what the certificate viewer says: Could not verify this certificate because the user is unknown. See image.
cor-el
  • Top 10 Contributor
  • Moderator
17479 solutions 157964 answers

I see this certificate chain in the Details tab.

I see this certificate chain in the Details tab. *https://www.airbnb.com

Question owner

I see this certificate chain in the Details tab.

I see this certificate chain in the Details tab.
cor-el
  • Top 10 Contributor
  • Moderator
17479 solutions 157964 answers

The certificate chain look OK, so why would there be a problem with an unknown issuer.

Try to rename the cert8.db file (cert8.db.old) and delete the cert_override.txt file in the Firefox profile folder to remove intermediate certificates and exceptions that Firefox has stored.

If that has helped to solve the problem then you can remove the renamed cert8.db.old file. Otherwise you can rename (or copy) the cert8.db.old file to cert8.db to restore the previously stored intermediate certificates. Firefox will automatically store intermediate certificates when you visit websites that send such a certificate.

If that didn't help then remove or rename secmod.db (secmod.db.old) as well.

You can use this button to go to the currently used Firefox profile folder:

The certificate chain look OK, so why would there be a problem with an unknown issuer. Try to rename the cert8.db file (cert8.db.old) and delete the cert_override.txt file in the Firefox profile folder to remove intermediate certificates and exceptions that Firefox has stored. If that has helped to solve the problem then you can remove the renamed cert8.db.old file. Otherwise you can rename (or copy) the cert8.db.old file to cert8.db to restore the previously stored intermediate certificates. Firefox will automatically store intermediate certificates when you visit websites that send such a certificate. If that didn't help then remove or rename secmod.db (secmod.db.old) as well. You can use this button to go to the currently used Firefox profile folder: *Help > Troubleshooting Information > Profile Directory: Show Folder (Linux: Open Directory; Mac: Show in Finder) *http://kb.mozillazine.org/Profile_folder_-_Firefox

Question owner

Dear Cor-El,

Horray! Deleting the cert8.db file fixed the problem with Airbnb.com and with my bank's website.

However, it did not fix the problem trying to access the career page on the City of San Jose's website (https://cityjobs.sanjoseca.gov/psc/prod/EMPLOYEE/HRMS/c/HRS_HRAM.HRS_CE.GBL?Page=HRS_CE_HM_PREAction=ASiteID=1)

I went to chrome://pippki/content/exceptionDialog.xul to try to get the certificate and there wasn't any. Instead I got an error message:

"Secure Connection Failed

An error occurred during a connection to cityjobs.sanjoseca.gov. Cannot communicate securely with peer: no common encryption algorithm(s). (Error code: ssl_error_no_cypher_overlap)

The page you are trying to view cannot be shown because the authenticity of the received data could not be verified. Please contact the website owners to inform them of this problem."

I have attempted several times to contact the IT department at the City to no avail. Is there someway you can contact them to let them know of the problem? I can access the careers information without problem using IE 8.0.

Dear Cor-El, Horray! Deleting the cert8.db file fixed the problem with Airbnb.com and with my bank's website. However, it did not fix the problem trying to access the career page on the City of San Jose's website (https://cityjobs.sanjoseca.gov/psc/prod/EMPLOYEE/HRMS/c/HRS_HRAM.HRS_CE.GBL?Page=HRS_CE_HM_PREAction=ASiteID=1) I went to chrome://pippki/content/exceptionDialog.xul to try to get the certificate and there wasn't any. Instead I got an error message: "Secure Connection Failed An error occurred during a connection to cityjobs.sanjoseca.gov. Cannot communicate securely with peer: no common encryption algorithm(s). (Error code: ssl_error_no_cypher_overlap) The page you are trying to view cannot be shown because the authenticity of the received data could not be verified. Please contact the website owners to inform them of this problem." I have attempted several times to contact the IT department at the City to no avail. Is there someway you can contact them to let them know of the problem? I can access the careers information without problem using IE 8.0.
cor-el
  • Top 10 Contributor
  • Moderator
17479 solutions 157964 answers

The website may try to fallback to TLS 1.0 in a way that is no longer allowed in current releases or may be using a deprecated cipher suite.

You can open the about:config page via the location/address bar and use its search bar to locate this pref:

  • security.tls.insecure_fallback_hosts

You can double-click the line to modify the pref and add the full domain (cityjobs.sanjoseca.gov) to the value of this pref. If there are already websites (domains) in this list then add a comma and the new domain (no spaces). There should only be domains separated by a comma in the Value column (example.com,www.example.com).

If this helps then you can contact this website and ask them to look into this and update their security.


The website may try to fallback to TLS 1.0 in a way that is no longer allowed in current releases or may be using a deprecated cipher suite. You can open the <b>about:config</b> page via the location/address bar and use its search bar to locate this pref: *security.tls.insecure_fallback_hosts You can double-click the line to modify the pref and add the full domain (cityjobs.sanjoseca.gov) to the value of this pref. If there are already websites (domains) in this list then add a comma and the new domain (no spaces). There should only be domains separated by a comma in the Value column (example.com,www.example.com). If this helps then you can contact this website and ask them to look into this and update their security. ---- *https://developer.mozilla.org/en-US/Firefox/Releases/36/Site_Compatibility#Security *https://developer.mozilla.org/en-US/Firefox/Releases/37/Site_Compatibility#Security