X
Tap here to go to the mobile version of the site.

Support Forum

I keep on getting a SEC_ERROR_UNKNOWN_ISSUER_ message and I have tried multiple sites, posts and videos but am still receiving this message! Please help asap.

Posted

I keep on getting a SEC_ERROR_UNKNOWN_ISSUER_ message and I have tried multiple sites, posts and videos but am still receiving this message! Please help asap.

I keep on getting a SEC_ERROR_UNKNOWN_ISSUER_ message and I have tried multiple sites, posts and videos but am still receiving this message! Please help asap.

Additional System Details

Application

  • User Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.181 Safari/537.36

More Information

Shadow110 1072 solutions 14836 answers
HI, There is security software like Avast/AVG, Kaspersky, BitDefender and ESET that intercept secure connections and send their own certificate. *https://support.mozilla.org/en-US/kb/firefox-cant-load-websites-other-browsers-can *https://support.mozilla.org/en-US/kb/firefox-and-other-browsers-cant-load-websites *https://support.mozilla.org/en-US/kb/secure-connection-failed-error-message *https://support.mozilla.org/en-US/kb/connection-untrusted-error-message *http://kb.mozillazine.org/Error_loading_websites *https://support.mozilla.org/en-US/kb/troubleshoot-SEC_ERROR_UNKNOWN_ISSUER
Shadow110 1072 solutions 14836 answers

If you are running one of the Security programs you may have to go to it's Community Forum for a work around in the program.

If you are running one of the Security programs you may have to go to it's Community Forum for a work around in the program.

Modified by Shadow110

Question owner

I don't have Avast or Bitfender ... I did also have a look at some of those links but I'll have a look again thanks :)

I don't have Avast or Bitfender ... I did also have a look at some of those links but I'll have a look again thanks :)

Modified by maryam.maryam

Question owner

I don't have any of those installed Avast or Bitfender. Idk what the source of the problem is.

I don't have any of those installed Avast or Bitfender. Idk what the source of the problem is.
Shadow110 1072 solutions 14836 answers

Do you get any error messages ? What happened in Safe Mode when you tested the site ?

SHIELD ICON Tracking Protection

One issue that seems more common lately is Firefox's Tracking Protection feature. When it is blocking content in a page, a shield icon will appear at the left end of the address bar next to the padlock icon. This article has more info on managing this feature: Tracking Protection https://support.mozilla.org/en-US/kb/tracking-protection

Do you get any error messages ? What happened in Safe Mode when you tested the site ? SHIELD ICON Tracking Protection One issue that seems more common lately is Firefox's Tracking Protection feature. When it is blocking content in a page, a shield icon will appear at the left end of the address bar next to the padlock icon. This article has more info on managing this feature: Tracking Protection https://support.mozilla.org/en-US/kb/tracking-protection

Question owner

Yes, I get a SEC_ERROR_UNKNOWN_ISSUER error message. No, I see no shield icon. I did attach a screenshot to my question of what I see.

Yes, I get a SEC_ERROR_UNKNOWN_ISSUER error message. No, I see no shield icon. I did attach a screenshot to my question of what I see.
cor-el
  • Top 10 Contributor
  • Moderator
17481 solutions 157977 answers

Helpful Reply

You can check if there is more detail available about the issuer of the certificate.

  • click the "Advanced" button show more detail
  • click the blue SEC_ERROR_UNKNOWN_ISSUER message to show the certificate chain
  • click "Copy text to clipboard" and paste the base64 certificate chain text in a reply

If clicking the SEC_ERROR_UNKNOWN_ISSUER text doesn't provide the certificate chain then try these steps to inspect the certificate.

  • open the Server tab in the Certificate Manager
    • Options/Preferences -> Privacy & Security
      Certificates: View Certificates -> Servers: "Add Exception"
  • paste the URL of the website (https://xxx.xxx) in it's Location field.

Let Firefox retrieve the certificate -> "Get Certificate"

  • click the "View" button and inspect the certificate

You can see detail like the issuer of the certificate and intermediate certificates in the Details tab.

You can check if there is more detail available about the issuer of the certificate. *click the "Advanced" button show more detail *click the blue SEC_ERROR_UNKNOWN_ISSUER message to show the certificate chain *click "Copy text to clipboard" and paste the base64 certificate chain text in a reply If clicking the SEC_ERROR_UNKNOWN_ISSUER text doesn't provide the certificate chain then try these steps to inspect the certificate. *open the Server tab in the Certificate Manager **Options/Preferences -> Privacy & Security<br>Certificates: View Certificates -> Servers: "Add Exception" *paste the URL of the website (https://xxx.xxx) in it's Location field. Let Firefox retrieve the certificate -> "Get Certificate" *click the "View" button and inspect the certificate You can see detail like the issuer of the certificate and intermediate certificates in the Details tab.

Question owner

This is the certificate chain I get:


https://www.google.com/?as_qdr=all&gws_rd=ssl

Peer's Certificate issuer is not recognised.

HTTP Strict Transport Security: false HTTP Public Key Pinning: true

Certificate chain:


BEGIN CERTIFICATE-----

MIICzjCCAbagAwIBAgIJAIsYLFSv5sybMA0GCSqGSIb3DQEBCwUAMCgxCzAJBgNV BAYTAkVTMRkwFwYDVQQDDBBRdXN0b2RpbyAoNTQ1MTcpMB4XDTE4MDUyMzA5NDY0 M1oXDTE4MDgxNTA5MDgwMFowaDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCkNhbGlm b3JuaWExFjAUBgNVBAcTDU1vdW50YWluIFZpZXcxEzARBgNVBAoTCkdvb2dsZSBM TEMxFzAVBgNVBAMTDnd3dy5nb29nbGUuY29tMIGfMA0GCSqGSIb3DQEBAQUAA4GN ADCBiQKBgQC8fXsyVH5E12LI+HhkavjmVbeyVYa4pg9ziRkkp0t9PeajbQoyKBqc rpcthUauax9bwb2oH+JDBvfh0K/fTXZL6AyzrywkgzZXwGc5yFUmtND1wc3B5KOG UgVQKA8dDERGs1IPqGjVHgkADeCmkPlTJgh+2A1WfEayLXMBsmGRBwIDAQABoz8w PTAZBgNVHREEEjAQgg53d3cuZ29vZ2xlLmNvbTALBgNVHQ8EBAMCB4AwEwYDVR0l BAwwCgYIKwYBBQUHAwEwDQYJKoZIhvcNAQELBQADggEBAGextnzdsGfycNp8qqbW PNCSB8LZSOxQp0pT0dn+XokXcsaCpyOvUVBh+DM+ky9NKzKF4WCdWx2zp+0FIH2y TUlCyS5JVf4D7X0Ye98+2S1Ad7WRyk6L/3A+BLSMJXdH1tU90ZjP6sFtxPW2e2T2 eZqzpJExlHJfeKsrLNVy+vKO/Ynfm2WunRP24ENQmfioPQC4sS10NiHClf7p+mvg Rcm83wQxuDuay4nvMejn8kEbpr1+VkbB2KiACNtAtm55KHEqNvmkrZN90RJZbByp PKxPQJXZc5UxoVj1TNRWOKYiio8sSI2aBLhPOZ3AsDy+WD5ynRNBQ1Ffp5i1tTEz GMc=


END CERTIFICATE-----
This is the certificate chain I get: https://www.google.com/?as_qdr=all&gws_rd=ssl Peer's Certificate issuer is not recognised. HTTP Strict Transport Security: false HTTP Public Key Pinning: true Certificate chain: -----BEGIN CERTIFICATE----- MIICzjCCAbagAwIBAgIJAIsYLFSv5sybMA0GCSqGSIb3DQEBCwUAMCgxCzAJBgNV BAYTAkVTMRkwFwYDVQQDDBBRdXN0b2RpbyAoNTQ1MTcpMB4XDTE4MDUyMzA5NDY0 M1oXDTE4MDgxNTA5MDgwMFowaDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCkNhbGlm b3JuaWExFjAUBgNVBAcTDU1vdW50YWluIFZpZXcxEzARBgNVBAoTCkdvb2dsZSBM TEMxFzAVBgNVBAMTDnd3dy5nb29nbGUuY29tMIGfMA0GCSqGSIb3DQEBAQUAA4GN ADCBiQKBgQC8fXsyVH5E12LI+HhkavjmVbeyVYa4pg9ziRkkp0t9PeajbQoyKBqc rpcthUauax9bwb2oH+JDBvfh0K/fTXZL6AyzrywkgzZXwGc5yFUmtND1wc3B5KOG UgVQKA8dDERGs1IPqGjVHgkADeCmkPlTJgh+2A1WfEayLXMBsmGRBwIDAQABoz8w PTAZBgNVHREEEjAQgg53d3cuZ29vZ2xlLmNvbTALBgNVHQ8EBAMCB4AwEwYDVR0l BAwwCgYIKwYBBQUHAwEwDQYJKoZIhvcNAQELBQADggEBAGextnzdsGfycNp8qqbW PNCSB8LZSOxQp0pT0dn+XokXcsaCpyOvUVBh+DM+ky9NKzKF4WCdWx2zp+0FIH2y TUlCyS5JVf4D7X0Ye98+2S1Ad7WRyk6L/3A+BLSMJXdH1tU90ZjP6sFtxPW2e2T2 eZqzpJExlHJfeKsrLNVy+vKO/Ynfm2WunRP24ENQmfioPQC4sS10NiHClf7p+mvg Rcm83wQxuDuay4nvMejn8kEbpr1+VkbB2KiACNtAtm55KHEqNvmkrZN90RJZbByp PKxPQJXZc5UxoVj1TNRWOKYiio8sSI2aBLhPOZ3AsDy+WD5ynRNBQ1Ffp5i1tTEz GMc= -----END CERTIFICATE-----
user1504726 2 solutions 48 answers

What antivirus are you running? I used to have the same problem a few months ago but I fixed it. https://support.mozilla.org/en-US/kb/configure-firewalls-so-firefox-can-access-internet

What antivirus are you running? I used to have the same problem a few months ago but I fixed it. https://support.mozilla.org/en-US/kb/configure-firewalls-so-firefox-can-access-internet
user1504726 2 solutions 48 answers

And it just MIGHT be the versions you are running.

And it just MIGHT be the versions you are running.
cor-el
  • Top 10 Contributor
  • Moderator
17481 solutions 157977 answers

Helpful Reply

The issuer of the certificate is your Qustodio Parental Control Software, so you need to check this software to see how to add its root certificate to Firefox.

  • Subject C=US, ST=California, L=Mountain View, O=Google LLC, CN=www.google.com
  • Issuer C=ES, CN=Qustodio (54517)

You can export the certificate in a browser that works and import the certificate in the Firefox Certificate Manager under the Authorities tab.

  • Options/Preferences -> Privacy & Security -> Certificates: View Certificates -> Authorities: Import

When prompted then set the trust bit to identify websites. Trust bits are only required for trusted root certificates and should never be set on an intermediate certificate.

You can find the Certificates section at the bottom of the "Privacy & Security" page or use the search bar (certificate).

The issuer of the certificate is your Qustodio Parental Control Software, so you need to check this software to see how to add its root certificate to Firefox. *Subject C=US, ST=California, L=Mountain View, O=Google LLC, CN=www.google.com *Issuer C=ES, CN=Qustodio (54517) You can export the certificate in a browser that works and import the certificate in the Firefox Certificate Manager under the Authorities tab. *Options/Preferences -> Privacy & Security -> Certificates: View Certificates -> Authorities: Import When prompted then set the trust bit to identify websites. Trust bits are only required for trusted root certificates and should never be set on an intermediate certificate. You can find the Certificates section at the bottom of the "Privacy & Security" page or use the search bar (certificate).

Question owner

Yes, there is Qustodio installed on my laptop, probably because of that. Ok, I'll have a look thanks very much cor-el.

Yes, there is Qustodio installed on my laptop, probably because of that. Ok, I'll have a look thanks very much cor-el.