Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

Why does Firefox 71 prefer an expired client certificate?

  • No replies
  • 1 has this problem
  • 2 views
more options

I have multiple client certificates in Firefox. When I go to a site which requires a client certificate it pops up the selector for the client certificate. With Firefox 70 (I think) by default it chose a matching and valid client certificate. Now with Firefox 71 it seems to sort the client certificates by serial number and thus the one selected by default is the first one in the list, which is expired in my case. Thus, now each time I go to a site where I need a client cert I must manually pick the correct, valid certificate.

Doesn't looks like an improvement to me. Or is there a new config setting which I have missed?

I have multiple client certificates in Firefox. When I go to a site which requires a client certificate it pops up the selector for the client certificate. With Firefox 70 (I think) by default it chose a matching and valid client certificate. Now with Firefox 71 it seems to sort the client certificates by serial number and thus the one selected by default is the first one in the list, which is expired in my case. Thus, now each time I go to a site where I need a client cert I must manually pick the correct, valid certificate. Doesn't looks like an improvement to me. Or is there a new config setting which I have missed?