Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

Startcom is an unknown SSL issuer?

  • 2 replies
  • 4 have this problem
  • 1 view
  • Last reply by strmoz

more options

I'm trying to use a website at blocktogether.org, and get the connection untrusted error because it says the certificate issuer is unknown. Attached is an image of the cert details. A quick google search turned up some comments that Startcom may have been being looked at for possible removal from the known CAs list due to something related to the heartbleed bug and their cert revocation policies, but I wasn't able to find anything definitive.

I'm using Firefox 39.0 on Windows 7/64 with up-to-date microsoft patches.

I'm trying to use a website at blocktogether.org, and get the connection untrusted error because it says the certificate issuer is unknown. Attached is an image of the cert details. A quick google search turned up some comments that Startcom may have been being looked at for possible removal from the known CAs list due to something related to the heartbleed bug and their cert revocation policies, but I wasn't able to find anything definitive. I'm using Firefox 39.0 on Windows 7/64 with up-to-date microsoft patches.
Attached screenshots

Modified by strmoz

Chosen solution

It works for me on an alternative Fx38 distro but not on Fx40. Presumbly not passing stricter criteria of Firefox 39.

You should be able to set an exception for this. See

I note this report mentions an incomplete chain, and a problem with prefix handling.

Read this answer in context 👍 1

All Replies (2)

more options

Chosen Solution

It works for me on an alternative Fx38 distro but not on Fx40. Presumbly not passing stricter criteria of Firefox 39.

You should be able to set an exception for this. See

I note this report mentions an incomplete chain, and a problem with prefix handling.

more options

Thank you John99, especially for the ssllabs link. I'll seek out and install the missing intermediate certificate rather than place an exception, now that I understand what's going on. :)