Certificate not accepted.
Hallo,
ich have Firefox 64.0 and since I have this new Versionthe Web-Site https://portal.sepacollect.de is not accessible.
This ist the error:
https://portal.sepacollect.de//
Eine zusätzliche Regelbeschränkung ist beim Validieren dieses Zertifikats fehlgeschlagen.
HTTP Strict Transport Security: true HTTP Public Key Pinning: false
Zertifikatskette:
BEGIN CERTIFICATE-----
MIIGZTCCBU2gAwIBAgIQLrngdNVvHVAGWPEdOx+XPjANBgkqhkiG9w0BAQsFADBC MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEbMBkGA1UEAxMS UmFwaWRTU0wgU0hBMjU2IENBMB4XDTE3MDUwNDAwMDAwMFoXDTIwMDUwMzIzNTk1 OVowGzEZMBcGA1UEAwwQKi5zZXBhY29sbGVjdC5kZTCCASIwDQYJKoZIhvcNAQEB BQADggEPADCCAQoCggEBAMzn62ptU/fl1zWoUMZ183s4qCwlBgReeK/xHOj1RIad fE6YD07QeqNl+vmsh3KqZoNf82+WxARaC7FuICuSM/FRXS9iQxOt6LHM2olUyRkk 4CCMSazXAVJ7yRk0Oc3At2X8/ZydGJ+DsbXTCW46Gr87qB54XWadm2EqHHMk1umC IEA5s4jdyMpwDtTsDZhPT7zPIgnZeWGHPLyQedHdRA1Ih+9sHuG+FJyL7doPFVj1 KOWwnQ01JVf8PEVIZy3KjNN3hc+TEGlvxJS248zFpZjzqp0VNWALZi4M5A6zvvjP 0RwupWPGJPxK/TCM8g5HLxQsQ9EuY7YfeEQYR/e0bBcCAwEAAaOCA3wwggN4MCsG A1UdEQQkMCKCECouc2VwYWNvbGxlY3QuZGWCDnNlcGFjb2xsZWN0LmRlMAkGA1Ud EwQCMAAwKwYDVR0fBCQwIjAgoB6gHIYaaHR0cDovL2dwLnN5bWNiLmNvbS9ncC5j cmwwbwYDVR0gBGgwZjBkBgZngQwBAgEwWjAqBggrBgEFBQcCARYeaHR0cHM6Ly93 d3cucmFwaWRzc2wuY29tL2xlZ2FsMCwGCCsGAQUFBwICMCAMHmh0dHBzOi8vd3d3 LnJhcGlkc3NsLmNvbS9sZWdhbDAfBgNVHSMEGDAWgBSXwidQnsLJ7AyIMsh8reKm AU/abzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF BwMCMFcGCCsGAQUFBwEBBEswSTAfBggrBgEFBQcwAYYTaHR0cDovL2dwLnN5bWNk LmNvbTAmBggrBgEFBQcwAoYaaHR0cDovL2dwLnN5bWNiLmNvbS9ncC5jcnQwggH1 BgorBgEEAdZ5AgQCBIIB5QSCAeEB3wB2AN3rHSt6DU+mIIuBrYFocH4ujp0B1VyI jT0RxM227L7MAAABW9KByUYAAAQDAEcwRQIgQn3YzPa2DQ83st5S04m30YbBBEft d9ELg+WM/k1CnzUCIQCngV79nNZdcP+H+jsIxsVYoXdLNxd+1VF/RJ6w8fJA5gB1 AKS5CZC0GFgUh7sTosxncAo8NZgE+RvfuON3zQ7IDdwQAAABW9KByWQAAAQDAEYw RAIgHDyMzBXNSUgwu2z4SKHytqBtpMbvvOK3xKe7aUDfsm4CIHvxJs+BJ6oryRcv m3a1XvYrvBFzu1lX2qAGRFsKzc0fAHYA7ku9t3XOYLrhQmkfq+GeZqMPfl+wctiD AMR7iXqo/csAAAFb0oHLPAAABAMARzBFAiEApNQcO30oJ2zkwTAzMCSbl0GkgCny 1+HDpBCE8UYQDuoCICakZ3o8hOgMy5bSXtXziT3FiKhvD4kNM6Y2BgQx1zbUAHYA vHjh38X2PGhGSTNNoQ+hXwl5aSAJwIG08/aRfz7ZuKUAAAFb0oHKgQAABAMARzBF AiAqpOcGBZJUGY9+g29YGSMiiiFNvRyoMDUcv6L4MyLTpgIhAIS2po19zXP07zFu f29Wp2RkRhkE85+SfQTOIEo9SYvnMA0GCSqGSIb3DQEBCwUAA4IBAQBwaf2X3onQ BHSn3R6kZKG+CUG1N+B8oYvTmmLghCfHfV+97gx756Fo4twy1WpkSkhwntuaP556 /GDnmekoZixqdfyPuyMnOzchPkKcT2ft1NPlSy/wNrog/LhwiKlsDsdzjsdPfI07 r8CTih7d8hhNZU+R2bphpIJcg09H1Zrw4cHdHzs39Xx1NrWe12K2sv1MTpu7nNFW WN47pX9g9paYKpMgTKifWeZyzebHs5C6r2EZ5GfW+VlZG1+tm0rutbehf3xrNMHi RUKPfaLd+jOzzSUTfhLVBjVmfz32V0wH8jHvQ4usPEOFBa+Tnw0/cZCM5JxPUZ2f 3CrLopknCChZ
END CERTIFICATE-----
BEGIN CERTIFICATE-----
MIIETTCCAzWgAwIBAgIDAjpxMA0GCSqGSIb3DQEBCwUAMEIxCzAJBgNVBAYTAlVT MRYwFAYDVQQKEw1HZW9UcnVzdCBJbmMuMRswGQYDVQQDExJHZW9UcnVzdCBHbG9i YWwgQ0EwHhcNMTMxMjExMjM0NTUxWhcNMjIwNTIwMjM0NTUxWjBCMQswCQYDVQQG EwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEbMBkGA1UEAxMSUmFwaWRTU0wg U0hBMjU2IENBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1jBEgEu l9h9GKrIwuWF4hdsYC7JjTEFORoGmFbdVNcRjFlbPbFUrkshhTIWX1SG5tmx2GCJ a1i+ctqgAEJ2sSdZTM3jutRc2aZ/uyt11UZEvexAXFm33Vmf8Wr3BvzWLxmKlRK6 msrVMNI4/Bk7WxU7NtBDTdFlodSLwWBBs9ZwF8w5wJwMoD23ESJOztmpetIqYpyg C04q18NhWoXdXBC5VD0tA/hJ8LySt7ecMcfpuKqCCwW5Mc0IW7siC/acjopVHHZD dvDibvDfqCl158ikh4tq8bsIyTYYZe5QQ7hdctUoOeFTPiUs2itP3YqeUFDgb5rE 1RkmiQF1cwmbOwIDAQABo4IBSjCCAUYwHwYDVR0jBBgwFoAUwHqYaI2J+6sFZAwR fap9ZbjKzE4wHQYDVR0OBBYEFJfCJ1CewsnsDIgyyHyt4qYBT9pvMBIGA1UdEwEB /wQIMAYBAf8CAQAwDgYDVR0PAQH/BAQDAgEGMDYGA1UdHwQvMC0wK6ApoCeGJWh0 dHA6Ly9nMS5zeW1jYi5jb20vY3Jscy9ndGdsb2JhbC5jcmwwLwYIKwYBBQUHAQEE IzAhMB8GCCsGAQUFBzABhhNodHRwOi8vZzIuc3ltY2IuY29tMEwGA1UdIARFMEMw QQYKYIZIAYb4RQEHNjAzMDEGCCsGAQUFBwIBFiVodHRwOi8vd3d3Lmdlb3RydXN0 LmNvbS9yZXNvdXJjZXMvY3BzMCkGA1UdEQQiMCCkHjAcMRowGAYDVQQDExFTeW1h bnRlY1BLSS0xLTU2OTANBgkqhkiG9w0BAQsFAAOCAQEANevhiyBWlLp6vXmp9uP+ bji0MsGj21hWID59xzqxZ2nVeRQb9vrsYPJ5zQoMYIp0TKOTKqDwUX/N6fmS/Zar RfViPT9gRlATPSATGC6URq7VIf5Dockj/lPEvxrYrDrK3maXI67T30pNcx9vMaJR BBZqAOv5jUOB8FChH6bKOvMoPF9RrNcKRXdLDlJiG9g4UaCSLT+Qbsh+QJ8gRhVd 4FB84XavXu0R0y8TubglpK9YCa81tGJUheNI3rzSkHp6pIQNo0LyUcDUrVNlXWz4 Px8G8k/Ll6BKWcZ40egDuYVtLLrhX7atKz4lecWLVtXjCYDqwSfC2Q7sRwrp0Mr8 2A==
END CERTIFICATE-----
Chosen solution
On mine, there is additional information:
"Most browsers no longer trust certificates issued by GeoTrust, RapidSSL, Symantec, Thawte, and VeriSign. portal.sepacollect.de uses a certificate from one of these authorities and so the website’s identity cannot be proven."
When I click the "Advanced" button, I find:
Certificates issued by GeoTrust, RapidSSL, Symantec, Thawte, and VeriSign are no longer considered safe because these certificate authorities failed to follow security practices in the past. Error code: MOZILLA_PKIX_ERROR_ADDITIONAL_POLICY_CONSTRAINT_FAILED
What can you do? Two options:
(1) Add a site exception.
A button may appear in the section that opens with the Advanced button, if the site allows exceptions.
(2) Undo the policy restriction.
Firefox will still warn you about other issues, such as an expired certificate.
(a) In a new tab, type or paste about:config in the address bar and press Enter/Return. Click the button promising to be careful or accepting the risk.
(b) In the search box above the list, type or paste pki and pause while the list is filtered
(c) Double-click the security.pki.distrust_ca_policy preference to display a dialog where you can enter the desired value:
- 2 - block all Symantec certs -- default in Firefox 64+
- 1 - block Symantec certs issued before June 1, 2016 -- default in Firefox 60-63
- 0 - don't block Symantec certs
If you need to restore the default value of this preference, you can right-click > Reset it.
Read this answer in context 👍 1All Replies (4)
Here's what I get when clicking on the link:
Your connection is not secure
The owner of portal.sepacollect.de has configured their website improperly. To protect your information from being stolen, Firefox has not connected to this website.
This is not possible, bacause....
- If I try with Internet Explorer, it works. - If I try with Firefox 36.0.1 (for Example). it works too.
- (
Chosen Solution
On mine, there is additional information:
"Most browsers no longer trust certificates issued by GeoTrust, RapidSSL, Symantec, Thawte, and VeriSign. portal.sepacollect.de uses a certificate from one of these authorities and so the website’s identity cannot be proven."
When I click the "Advanced" button, I find:
Certificates issued by GeoTrust, RapidSSL, Symantec, Thawte, and VeriSign are no longer considered safe because these certificate authorities failed to follow security practices in the past. Error code: MOZILLA_PKIX_ERROR_ADDITIONAL_POLICY_CONSTRAINT_FAILED
What can you do? Two options:
(1) Add a site exception.
A button may appear in the section that opens with the Advanced button, if the site allows exceptions.
(2) Undo the policy restriction.
Firefox will still warn you about other issues, such as an expired certificate.
(a) In a new tab, type or paste about:config in the address bar and press Enter/Return. Click the button promising to be careful or accepting the risk.
(b) In the search box above the list, type or paste pki and pause while the list is filtered
(c) Double-click the security.pki.distrust_ca_policy preference to display a dialog where you can enter the desired value:
- 2 - block all Symantec certs -- default in Firefox 64+
- 1 - block Symantec certs issued before June 1, 2016 -- default in Firefox 60-63
- 0 - don't block Symantec certs
If you need to restore the default value of this preference, you can right-click > Reset it.
Also, if you have a relationship with this site, please inform them that they need to get a new certificate.