The day after I updated Firefox, I began getting SEC_ERROR_UNKNOWN_ISSUER errors on EVERY website -- even Mozilla.
The day after I updated Firefox, I began getting SEC_ERROR_UNKNOWN_ISSUER errors on EVERY website -- even Mozilla. I haven't changed anything else on my computer, so I'm wondering if it's a conflict with the Firefox update? I run Webroot for antivirus. I am not on a server. This is my home computer. The plugins I currently have are not all the ones I had when I updated -- they appear to have all be disabled/deleted.
Thanks for any help!
Chosen solution
The certificate is issued by your Qustodio Parental Control.
- Subject C=US, ST=California, L=Mountain View, O=Google Inc, CN=www.google.com
- Issuer C=ES, CN=Qustodio (26641)
You will have to install the Qustodio root certificate in the Firefox Certificate Manager.
Did it worked before with this software installed?
If you used the refresh feature in Firefox then you can try to copy cert8.db from the "Old Firefox Data" folder on the desktop to the current profile folder.
You can use the button on the "Help -> Troubleshooting Information" (about:support) page to go to the current Firefox profile folder or use the about:profiles page.
- Help -> Troubleshooting Information -> Profile Directory:
Windows: Show Folder; Linux: Open Directory; Mac: Show in Finder - http://kb.mozillazine.org/Profile_folder_-_Firefox
If this doesn't apply then try to inspect the certificate chain in a browser that works and export the root certificate to a .cer file and import this root certificate in the Firefox Certificate Manager.
- Options/Preferences -> Privacy & Security -> Certificates: View Certificates
All Replies (7)
https://support.mozilla.org/en-US/kb/troubleshoot-SEC_ERROR_UNKNOWN_ISSUER
This has pretty much always been due to a antivirus client trying to help keep you safe by inserting its own certificate but instead causing this error on https://. This can happen after a new major Firefox update or install on Windows.
The article gives a idea of what kind of feature to look for and turn off in the antivirus client you have.
Not likely the cause in this case but another common reason for secure connection issues is due to system date being incorrect.
Modified by James
Thanks -- However, that article doesn't reference Webroot, and I've looked all through the Webroot settings and can't find similar wording. Do you know if there are instructions out there specifically for Webroot? Thanks very much.
What Firewall ... Can check the settings in it and find if Firefox is listed if so delete it as it may reference earlier version. Re-enter it. If is not entered, enter it.
Put the name of your old plugins in this it will try to find a alternative : https://mozilla.github.io/extension-finder/
Please pick what you want to read from search re: ff 57 and Webroot https://www.google.ca/search?q=firefox+57+and+Webroot&ie=utf-8&oe=utf-8&client=firefox-b&gfe_rd=cr&dcr=0&ei=knMiWrP9G-bFXpzCtLAE
Please let us know if this solved your issue or if need further assistance.
You can click the "Advanced" button to expand this section and show extra details. If the certificate is not trusted because no issuer chain was provided (SEC_ERROR_UNKNOWN_ISSUER) then click the blue error message to expand this section and show the certificate chain. You can click "Copy text to clipboard" and paste this base64 encoded certificate chain text in a reply. That will allow us to details like the issuer of the certificate.
- always be cautious when you get an 'Untrusted' error message
- never create a permanent exception without investigating the cause and only use this to inspect the certificate
Peer’s Certificate issuer is not recognized.
HTTP Strict Transport Security: false HTTP Public Key Pinning: true
Certificate chain:
BEGIN CERTIFICATE-----
MIICzjCCAbagAwIBAgIJAP9qD5qxIU4EMA0GCSqGSIb3DQEBCwUAMCgxCzAJBgNV BAYTAkVTMRkwFwYDVQQDDBBRdXN0b2RpbyAoMjY2NDEpMB4XDTE3MTEyMTE1MjUx OVoXDTE4MDIxMzE1MTkwMFowaDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCkNhbGlm b3JuaWExFjAUBgNVBAcTDU1vdW50YWluIFZpZXcxEzARBgNVBAoTCkdvb2dsZSBJ bmMxFzAVBgNVBAMTDnd3dy5nb29nbGUuY29tMIGfMA0GCSqGSIb3DQEBAQUAA4GN ADCBiQKBgQC6nTkbam5eDSNzo52BS3DykhcZqt1wbW1rym5yJ+2HyMYx81/oMEmC DCvbTUuE7L7cG9ZQmoXB5ThWW5fMXUzz8A5FRbpDibsuQScncPMa/kzald4Pq/+J MRfl8f429UFaTF4khd5q7yKZZUoBi4Q4DGtu7fhsuO5ALDAy3XIGWQIDAQABoz8w PTAZBgNVHREEEjAQgg53d3cuZ29vZ2xlLmNvbTALBgNVHQ8EBAMCB4AwEwYDVR0l BAwwCgYIKwYBBQUHAwEwDQYJKoZIhvcNAQELBQADggEBAEjtfcSGKITZMzFcb6u7 Xo+uKQOJjpWU1BtJJKLS4W+fbMFriv0ocG3sgZjt6z73kD2XvlQv4sxeX5iK+R0g EvUZTk16fDVfx0ur961EBtRG32OvIiOLlkQI0IfSM2irLuzNxv5l9S6JQbEYXVU3 5kks3or2PABuy/ZiL26kTBFA8msDk4FEHxLbqOXXDGRqlfe+PNO/rRKdxOdw539E lcUkI9eYkJbuvdy0HBpwj4OjW9yaoqc8SYYgfHdEc6dfgWGJ7r08VaxqZR+txbpT Ewjk4ZMOOS0UficZUUouOF6PtPgOhnV1RS+ihmXHABWv3vuNlrRSyiM5aN5NA3Hf uWE=
END CERTIFICATE-----
Chosen Solution
The certificate is issued by your Qustodio Parental Control.
- Subject C=US, ST=California, L=Mountain View, O=Google Inc, CN=www.google.com
- Issuer C=ES, CN=Qustodio (26641)
You will have to install the Qustodio root certificate in the Firefox Certificate Manager.
Did it worked before with this software installed?
If you used the refresh feature in Firefox then you can try to copy cert8.db from the "Old Firefox Data" folder on the desktop to the current profile folder.
You can use the button on the "Help -> Troubleshooting Information" (about:support) page to go to the current Firefox profile folder or use the about:profiles page.
- Help -> Troubleshooting Information -> Profile Directory:
Windows: Show Folder; Linux: Open Directory; Mac: Show in Finder - http://kb.mozillazine.org/Profile_folder_-_Firefox
If this doesn't apply then try to inspect the certificate chain in a browser that works and export the root certificate to a .cer file and import this root certificate in the Firefox Certificate Manager.
- Options/Preferences -> Privacy & Security -> Certificates: View Certificates
Thank you cor-el! I never would've recognized Qustodio as the problem. Doing a fresh install of Qustodio fixed the whole certificate issue, and it's working great. Thank you so much!