X
Tap here to go to the mobile version of the site.
Your Firefox is out of date and may contain a security risk! Upgrade Firefox

Support Forum

Invalid Certificate from FireFox

Posted

When using Firefox I get the following invalid security certificate message: static-ssl-cdn.addons.mozilla.net;443 uses an invalid security certificate. The certificate is not trusted because no issue chain was provided. Error code: sec_error_unknow_issuer

Is this a firefox issue? or the certificate you generate?

I do get the pop up panel indicating a "dangerous website" and accept the certificate exception. But then I get the above message. Lizette

Additional System Details

This happened

Every time Firefox opened

This started when...

using firefox and accessing the addons website

Installed Plug-ins

  • Citrix ICA Client Plugin (Win32)
  • Google Update
  • Shockwave Flash 10.3 r183
  • NPRuntime Script Plug-in Library for Java(TM) Deploy
  • Next Generation Java Plug-in 1.6.0_25 for Mozilla browsers
  • 4.0.60831.0
  • Adobe PDF Plug-In For Firefox and Netscape "9.4.4"

Application

  • User Agent: Mozilla/5.0 (Windows NT 6.1; rv:5.0) Gecko/20100101 Firefox/5.0

More Information

Application Basics
Name
Firefox
Version
5.0
User Agent
Mozilla/5.0 (Windows NT 6.1; rv:5.0) Gecko/20100101 Firefox/5.0
Profile Directory
Open Containing Folder
Enabled Plugins
about:plugins
Build Configuration
about:buildconfig
Extensions
Name
Version
Enabled
ID
DownThemAll!
2.0.7
true
{DDC359D1-844A-42a7-9AA1-88A850A938A8}
Modified Preferences
Name
Value
browser.places.smartBookmarksVersion
2
browser.startup.homepage_override.buildID
20110615151330
browser.startup.homepage_override.mstone
rv:5.0
extensions.lastAppVersion
5.0
network.cookie.prefsMigrated
true
places.database.lastMaintenance
1323274388
places.history.expiration.transient_current_max_pages
111460
privacy.sanitize.migrateFx3Prefs
true
security.warn_viewing_mixed
false
Graphics
Adapter Description
Intel(R) Q45/Q43 Express Chipset
Vendor ID
8086
Device ID
2e12
Adapter RAM
Unknown
Adapter Drivers
igdumdx32 igd10umd32
Driver Version
8.15.10.2302
Driver Date
2-11-2011
Direct2D Enabled
true
DirectWrite Enabled
true (6.1.7600.16763, font cache 16.81 MB)
WebGL Renderer
Google Inc. -- ANGLE -- OpenGL ES 2.0 (ANGLE 0.0.0.611)
GPU Accelerated Windows
1/1 Direct3D 10

Vivek 310 solutions 2084 answers

Hi,

Please check if DigiCert Inc. which comes with a standard Firefox installation is listed in Tools (Alt + T) > Options > Advanced > Encryption > View Certificates > Authorities.

...............................................................................................................................

Useful links:

All about Tools > Options

Going beyond Tools > Options - about:config

about:config Entries

Page Info Tools (Alt + T) > Page Info, Right-click > View Page Info

Keyboard Shortcuts

Viewing Video without Plugins

Firefox Profile Folder & Files

Firefox Commands

Basic Troubleshooting

After Upgrading

Safe Mode

Problematic Extensions

Troubleshooting Extensions and Themes

Troubleshooting Plugins

Testing Plugins

Question owner

Yes, the DigiCert Inc is in the list.

Lizette

Vivek 310 solutions 2084 answers

I've attached a screenshot. Is it the same in the Add Exception... > View > Details, Certificate Hierarchy (chain)? If When an OSCP server connection,... is enabled in Tools (Alt + T) > Options > Advanced > Encryption > Validation, this error may be temporary. The error may also happen if you are connecting through a proxy or a security software that connects on behalf of the browser. If possible you should also try to update Firefox. I think version 5.0 is no longer officially maintained.

Modified by Vivek

Vivek 310 solutions 2084 answers

Please also see this.

cor-el
  • Top 10 Contributor
  • Moderator
10739 solutions 96651 answers

Who is the issuer of that certificate?

I see a different certificate chain for that specific domain (Akamai Subordinate CA 3 -> GTE CyberTrust Global Root), so they may be using more servers for load balancing and you may get a different server.

You can retrieve the certificate and check details like who issued certificates and expiration dates of certificates.

  • Click the link at the bottom of the error page: "I Understand the Risks"

Let Firefox retrieve the certificate: "Add Exception" -> "Get Certificate".

  • Click the "View..." button and inspect the certificate and check who is the issuer.

You can see more Details like intermediate certificates that are used in the Details pane.