X
Tap here to go to the mobile version of the site.

Support Forum

Does firefox have an updated list of certificates?

Posted

I am having an issue specifically in Firefox (v47) regarding certificates. It is showing "SEC_ERROR_UNKNOWN_ISSUER" but it is not an unknown issuer. The certificate tree is: GeoTrust Global CA > GeoTrust DV SSL CA - G3 > mywebsite.ca

I think that maybe one of the certificates in the tree is not on your certificate list as it's working in every other browser (not sure tho).

Let me know!


Thanks, Robin

I am having an issue specifically in Firefox (v47) regarding certificates. It is showing "SEC_ERROR_UNKNOWN_ISSUER" but it is not an unknown issuer. The certificate tree is: GeoTrust Global CA > GeoTrust DV SSL CA - G3 > mywebsite.ca I think that maybe one of the certificates in the tree is not on your certificate list as it's working in every other browser (not sure tho). Let me know! Thanks, Robin

Additional System Details

Installed Plug-ins

  • Adobe® Acrobat® Plug-in for Web Browsers, Version 15.016.20045
  • Creative Cloud Desktop Plugin.v_3_0_0_0
  • Provides information about the default web browser
  • Version 5.41.3.0
  • Displays Java applet content, or a placeholder if Java is not installed.
  • Microsoft Office for Mac SharePoint Browser Plug-in
  • Shockwave Flash 21.0 r0

Application

  • Firefox 47.0
  • User Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:47.0) Gecko/20100101 Firefox/47.0
  • Support URL: https://support.mozilla.org/1/firefox/47.0/Darwin/en-US/

Extensions

  • Firefox Hello 1.3.2 (loop@mozilla.org)
  • Multi-process staged rollout 1.0 (e10srollout@mozilla.org)
  • Pocket 1.0.2 (firefox@getpocket.com)
  • SenSEO 2.5.0.1.1-signed.1-signed (senseo@nicosteiner.de)
  • Adobe Acrobat DC - Create PDF 15 (web2pdfextension@web2pdf.adobedotcom) (Inactive)

Javascript

  • incrementalGCEnabled: True

Graphics

  • adapterDescription:
  • adapterDeviceID: 0x6821
  • adapterDrivers:
  • adapterRAM:
  • adapterVendorID: 0x1002
  • driverDate:
  • driverVersion:
  • info: {u'AzureCanvasAccelerated': 1, u'AzureCanvasBackend': u'skia', u'AzureFallbackCanvasBackend': u'none', u'AzureContentBackend': u'quartz'}
  • numAcceleratedWindows: 1
  • numTotalWindows: 1
  • supportsHardwareH264: Yes
  • webglRenderer: ATI Technologies Inc. -- AMD Radeon R9 M370X OpenGL Engine
  • windowLayerManagerRemote: True
  • windowLayerManagerType: OpenGL

Modified Preferences

Misc

  • User JS: No
  • Accessibility: No
FredMcD
  • Top 10 Contributor
4227 solutions 59011 answers

There is security software like Avast and Kaspersky and BitDefender and ESET that intercept secure connections and send their own certificate.

https://support.mozilla.org/kb/troubleshoot-SEC_ERROR_UNKNOWN_ISSUER

There is security software like Avast and Kaspersky and BitDefender and ESET that intercept secure connections and send their own certificate. https://support.mozilla.org/kb/troubleshoot-SEC_ERROR_UNKNOWN_ISSUER
philipp
  • Top 25 Contributor
  • Moderator
5291 solutions 23378 answers

hi robin, your website might not provide a full certificate chain from an intermediate certificate to a trusted root certificate. you could check your site with a tool like https://www.ssllabs.com/ssltest/ and refer to the documentation of your certificate provider on how to properly implement it.

hi robin, your website might not provide a full certificate chain from an intermediate certificate to a trusted root certificate. you could check your site with a tool like https://www.ssllabs.com/ssltest/ and refer to the documentation of your certificate provider on how to properly implement it.
cor-el
  • Top 10 Contributor
  • Moderator
17421 solutions 157402 answers

We have seen reports that the time as set via an internet based time service was so much out of sync that an error occurs, so if that is the case with your current service then try to switch to another time service.

Try to rename the cert8.db file (cert8.db.old) and delete the cert_override.txt file in the Firefox profile folder to remove intermediate certificates and exceptions that Firefox has stored.

If that has helped to solve the problem then you can remove the renamed cert8.db.old file.

Firefox will automatically store intermediate certificates that servers send in the Certificate Manager for future use.

You can use this button to go to the current Firefox profile folder:

We have seen reports that the time as set via an internet based time service was so much out of sync that an error occurs, so if that is the case with your current service then try to switch to another time service. Try to rename the cert8.db file (cert8.db.old) and delete the cert_override.txt file in the Firefox profile folder to remove intermediate certificates and exceptions that Firefox has stored. If that has helped to solve the problem then you can remove the renamed cert8.db.old file. Firefox will automatically store intermediate certificates that servers send in the Certificate Manager for future use. You can use this button to go to the current Firefox profile folder: *Help > Troubleshooting Information > Profile Directory:<br>Windows: Show Folder; Linux: Open Directory; Mac: Show in Finder *http://kb.mozillazine.org/Profile_folder_-_Firefox