X
Tap here to go to the mobile version of the site.

Support Forum

Error after Windows 10 Update: The certificate is not trusted because the issuer certificate is unknown.

Posted

I came into work this morning to find my Windows 10 computer had restarted due to some updates. I also found that my network adapter wasn't working properly. I managed to get on the network, but I'm having trouble with Firefox. Specifically, one site is giving me trouble: https://store.ancientfaith.com/ This site works fine on other computers running Firefox. Other secure sites work fine on the affected computer (so far). What I get is a message that states:

Your connection is not secure The owner of store.ancientfaith.com has configured their website improperly. To protect your information from being stolen, Firefox has not connected to this website.

When I look at Advanced, I see: store.ancientfaith.com uses an invalid security certificate. The certificate is not trusted because the issuer certificate is unknown. The server might not be sending the appropriate intermediate certificates. An additional root certificate may need to be imported. (Error code: sec_error_unknown_issuer)

When I view the certificate, the only item in the certificate hierarchy is the site's cert. When I view it from another computer, or in another browser on the same computer, the hierarchy appears. Otherwise, the certificate information is identical across all computers and browsers.

I've deleted the cert8.db file, and I've done a Firefox refresh. Can anyone suggest a next step?

I came into work this morning to find my Windows 10 computer had restarted due to some updates. I also found that my network adapter wasn't working properly. I managed to get on the network, but I'm having trouble with Firefox. Specifically, one site is giving me trouble: https://store.ancientfaith.com/ This site works fine on other computers running Firefox. Other secure sites work fine on the affected computer (so far). What I get is a message that states: Your connection is not secure The owner of store.ancientfaith.com has configured their website improperly. To protect your information from being stolen, Firefox has not connected to this website. When I look at Advanced, I see: store.ancientfaith.com uses an invalid security certificate. The certificate is not trusted because the issuer certificate is unknown. The server might not be sending the appropriate intermediate certificates. An additional root certificate may need to be imported. (Error code: sec_error_unknown_issuer) When I view the certificate, the only item in the certificate hierarchy is the site's cert. When I view it from another computer, or in another browser on the same computer, the hierarchy appears. Otherwise, the certificate information is identical across all computers and browsers. I've deleted the cert8.db file, and I've done a Firefox refresh. Can anyone suggest a next step?

Chosen solution

cor-el said

You can copy the cert8.db file from a working computer to a not working profile or possibly export the involved intermediate certificate and import this certificate.
  • Tools > Options > Advanced > Certificates: View Certificates
You can use this button to go to the current Firefox profile folder:

This worked. Thank you.

I also alerted the Web site owner to the problem. Thank you both.

Read this answer in context 0

Additional System Details

Installed Plug-ins

  • Adobe PDF Plug-In For Firefox and Netscape 15.10.20056
  • Citrix Online App Detector Plugin
  • Intel web components for Intel® Identity Protection Technology
  • Intel web components updater - Installs and updates the Intel web components
  • The plugin allows you to have a better experience with Microsoft SharePoint
  • NPWLPG
  • Shockwave Flash 20.0 r0

Application

  • Firefox 44.0
  • User Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:44.0) Gecko/20100101 Firefox/44.0
  • Support URL: https://support.mozilla.org/1/firefox/44.0/WINNT/en-US/

Extensions

Javascript

  • incrementalGCEnabled: True

Graphics

  • adapterDescription: Intel(R) HD Graphics 4600
  • adapterDescription2:
  • adapterDeviceID: 0x0412
  • adapterDeviceID2:
  • adapterDrivers: igdumdim64 igd10iumd64 igd10iumd64 igd12umd64 igdumdim32 igd10iumd32 igd10iumd32 igd12umd32
  • adapterDrivers2:
  • adapterRAM: Unknown
  • adapterRAM2:
  • adapterSubsysID: 00000000
  • adapterSubsysID2:
  • adapterVendorID: 0x8086
  • adapterVendorID2:
  • direct2DEnabled: True
  • directWriteEnabled: True
  • directWriteVersion: 10.0.10586.0
  • driverDate: 11-16-2015
  • driverDate2:
  • driverVersion: 20.19.15.4326
  • driverVersion2:
  • info: {u'AzureCanvasBackend': u'direct2d 1.1', u'AzureFallbackCanvasBackend': u'cairo', u'AzureContentBackend': u'direct2d 1.1', u'AzureSkiaAccelerated': 0}
  • isGPU2Active: False
  • numAcceleratedWindows: 1
  • numTotalWindows: 1
  • supportsHardwareH264: Yes
  • webglRenderer: Google Inc. -- ANGLE (Intel(R) HD Graphics 4600 Direct3D11 vs_5_0 ps_5_0)
  • windowLayerManagerRemote: True
  • windowLayerManagerType: Direct3D 11

Modified Preferences

Misc

  • User JS: No
  • Accessibility: Yes
philipp
  • Top 25 Contributor
  • Moderator
5324 solutions 23508 answers

Helpful Reply

hi, that is indeed an error with the certificate chain that isn't properly implemented by this website: https://www.ssllabs.com/ssltest/analyze.html?d=store.ancientfaith.com

you should get in contact with them and report this issue, as at the moment it will depend on chance if it works when you visit the site with firefox (or to be more clear, it depends on if a particular firefox installation has come across another site before, that has properly implemented the "RapidSSL CA " intermediate cert, as this would get stored in the cert8.db file)...

hi, that is indeed an error with the certificate chain that isn't properly implemented by this website: https://www.ssllabs.com/ssltest/analyze.html?d=store.ancientfaith.com you should get in contact with them and report this issue, as at the moment it will depend on chance if it works when you visit the site with firefox (or to be more clear, it depends on if a particular firefox installation has come across another site before, that has properly implemented the "RapidSSL CA " intermediate cert, as this would get stored in the cert8.db file)...
cor-el
  • Top 10 Contributor
  • Moderator
17580 solutions 159059 answers

You can copy the cert8.db file from a working computer to a not working profile or possibly export the involved intermediate certificate and import this certificate.

  • Tools > Options > Advanced > Certificates: View Certificates

You can use this button to go to the current Firefox profile folder:

You can copy the cert8.db file from a working computer to a not working profile or possibly export the involved intermediate certificate and import this certificate. *Tools > Options > Advanced > Certificates: View Certificates You can use this button to go to the current Firefox profile folder: *Help > Troubleshooting Information > Profile Directory: Show Folder (Linux: Open Directory; Mac: Show in Finder) *http://kb.mozillazine.org/Profile_folder_-_Firefox *https://support.mozilla.org/kb/Recovering+important+data+from+an+old+profile *http://kb.mozillazine.org/Transferring_data_to_a_new_profile_-_Firefox

Chosen Solution

cor-el said

You can copy the cert8.db file from a working computer to a not working profile or possibly export the involved intermediate certificate and import this certificate.
  • Tools > Options > Advanced > Certificates: View Certificates
You can use this button to go to the current Firefox profile folder:

This worked. Thank you.

I also alerted the Web site owner to the problem. Thank you both.

''cor-el [[#answer-838965|said]]'' <blockquote> You can copy the cert8.db file from a working computer to a not working profile or possibly export the involved intermediate certificate and import this certificate. *Tools > Options > Advanced > Certificates: View Certificates You can use this button to go to the current Firefox profile folder: *Help > Troubleshooting Information > Profile Directory: Show Folder (Linux: Open Directory; Mac: Show in Finder) *http://kb.mozillazine.org/Profile_folder_-_Firefox *https://support.mozilla.org/kb/Recovering+important+data+from+an+old+profile *http://kb.mozillazine.org/Transferring_data_to_a_new_profile_-_Firefox </blockquote> This worked. Thank you. I also alerted the Web site owner to the problem. Thank you both.