X
Tap here to go to the mobile version of the site.

Support Forum

ssl error in Mobile version of Firefox

Posted

The site Https://parashinta.fi has a valid sert, but mob version of Firefox viewed it with cert error. Why ?

The site Https://parashinta.fi has a valid sert, but mob version of Firefox viewed it with cert error. Why ?

Chosen solution

Did you install the intermediate certs from DigiCert as suggested? https://www.digicert.com/ssl-certificate-installation.htm

This is not a mobile Firefox issue. It is an issue that any Firefox user who has not seen the DigiCert intermediate can encounter.

Read this answer in context 0
christ1
  • Top 25 Contributor
2176 solutions 15946 answers

What's the exact error?

What's the exact error?

Question owner

parashinta.fi uses an invalid security certificate. The certificate is not trusted because the issuer certificate is unknown. The server might not be sending the appropriate intermediate certificates. An additional root certificate may need to be imported. Error code: SEC_ERROR_UNKNOWN_ISSUER

parashinta.fi uses an invalid security certificate. The certificate is not trusted because the issuer certificate is unknown. The server might not be sending the appropriate intermediate certificates. An additional root certificate may need to be imported. Error code: SEC_ERROR_UNKNOWN_ISSUER
christ1
  • Top 25 Contributor
2176 solutions 15946 answers

What's needed is the issuer of the problematic cert. You can install this extension to determine the issuer information. https://addons.mozilla.org/en-US/firefox/addon/certainly-something/

Please post that information here.

What's needed is the issuer of the problematic cert. You can install this extension to determine the issuer information. https://addons.mozilla.org/en-US/firefox/addon/certainly-something/ Please post that information here.

Question owner

christ1 said

What's needed is the issuer of the problematic cert. You can install this extension to determine the issuer information. https://addons.mozilla.org/en-US/firefox/addon/certainly-something/ Please post that information here.

Do you mean it?

Country: US Organization: DigiCert Inc Organizational Unit :www.digicert.com Common Name : Thawte TLS RSA CA G1

''christ1 [[#answer-1228436|said]]'' <blockquote> What's needed is the issuer of the problematic cert. You can install this extension to determine the issuer information. https://addons.mozilla.org/en-US/firefox/addon/certainly-something/ Please post that information here. </blockquote> '''Do you mean it?''' Country: US Organization: DigiCert Inc Organizational Unit :www.digicert.com Common Name : Thawte TLS RSA CA G1
christ1
  • Top 25 Contributor
2176 solutions 15946 answers

Sort of, this looks like incomplete information though.

You can check the site yourself at https://www.ssllabs.com . When testing the parashinta.fi domain it says: This server's certificate chain is incomplete. Grade capped to B.

That means in intermediate cert is not sent by the server, and hence Firefox complains about it with the SEC_ERROR_UNKNOWN_ISSUER error.

'DigiCert Global Root G2' is the root CA, and is already trusted by Firefox. The 'Thawte TLS RSA CA G1' is an intermediate CA, and the server does not send that intermediate cert. It only sends it's own cert for 'parashinta.fi'.

You should contact the site owner so that they can fix their configuration.

Sort of, this looks like incomplete information though. You can check the site yourself at https://www.ssllabs.com . When testing the parashinta.fi domain it says: This server's certificate chain is incomplete. Grade capped to B. That means in intermediate cert is not sent by the server, and hence Firefox complains about it with the SEC_ERROR_UNKNOWN_ISSUER error. 'DigiCert Global Root G2' is the root CA, and is already trusted by Firefox. The 'Thawte TLS RSA CA G1' is an intermediate CA, and the server does not send that intermediate cert. It only sends it's own cert for 'parashinta.fi'. You should contact the site owner so that they can fix their configuration.

Question owner

christ1 said

Sort of, this looks like incomplete information though. You can check the site yourself at https://www.ssllabs.com . When testing the parashinta.fi domain it says: This server's certificate chain is incomplete. Grade capped to B. That means in intermediate cert is not sent by the server, and hence Firefox complains about it with the SEC_ERROR_UNKNOWN_ISSUER error. 'DigiCert Global Root G2' is the root CA, and is already trusted by Firefox. The 'Thawte TLS RSA CA G1' is an intermediate CA, and the server does not send that intermediate cert. It only sends it's own cert for 'parashinta.fi'. You should contact the site owner so that they can fix their configuration.

I do not showed you the all information from the Certificate Viewer. I was tested the site parashinta.fi on different ssl testers(not on https://www.ssllabs.com - they are not for free). They show reslut, and the result are success. Cert is valid. Only Firefox mobile give me the error of ssl cert. I am is a developer on this site. And i must solved this problem for my customer. Thx for your try to help me.

''christ1 [[#answer-1228449|said]]'' <blockquote> Sort of, this looks like incomplete information though. You can check the site yourself at https://www.ssllabs.com . When testing the parashinta.fi domain it says: This server's certificate chain is incomplete. Grade capped to B. That means in intermediate cert is not sent by the server, and hence Firefox complains about it with the SEC_ERROR_UNKNOWN_ISSUER error. 'DigiCert Global Root G2' is the root CA, and is already trusted by Firefox. The 'Thawte TLS RSA CA G1' is an intermediate CA, and the server does not send that intermediate cert. It only sends it's own cert for 'parashinta.fi'. You should contact the site owner so that they can fix their configuration. </blockquote> I do not showed you the all information from the '''Certificate Viewer'''. I was tested the site parashinta.fi on different ssl testers(not on https://www.ssllabs.com - they are not for free). They show reslut, and the result are success. Cert is valid. Only Firefox mobile give me the error of ssl cert. I am is a developer on this site. And i must solved this problem for my customer. Thx for your try to help me.
kbrosnan
  • Moderator
585 solutions 3855 answers

Chosen Solution

Did you install the intermediate certs from DigiCert as suggested? https://www.digicert.com/ssl-certificate-installation.htm

This is not a mobile Firefox issue. It is an issue that any Firefox user who has not seen the DigiCert intermediate can encounter.

Did you install the intermediate certs from DigiCert as suggested? https://www.digicert.com/ssl-certificate-installation.htm This is not a mobile Firefox issue. It is an issue that any Firefox user who has not seen the DigiCert intermediate can encounter.

Question owner

kbrosnan said

Did you install the intermediate certs from DigiCert as suggested? https://www.digicert.com/ssl-certificate-installation.htm This is not a mobile Firefox issue. It is an issue that any Firefox user who has not seen the DigiCert intermediate can encounter.

Thank. I tested the certificate on the Digicert website and added the required settings.

''kbrosnan [[#answer-1228573|said]]'' <blockquote> Did you install the intermediate certs from DigiCert as suggested? https://www.digicert.com/ssl-certificate-installation.htm This is not a mobile Firefox issue. It is an issue that any Firefox user who has not seen the DigiCert intermediate can encounter. </blockquote> Thank. I tested the certificate on the Digicert website and added the required settings.

Question owner

Please close the issue.

Please close the issue.