X
Tap here to go to the mobile version of the site.
Your Firefox is out of date and may contain a security risk! Upgrade Firefox

Support Forum

Every https site fails to load with an invalid certificate

Posted

I bought a new computer, I freshly installed Firefox 14 on Windows 7 (64 bit), and every https site fails to load, with various security certificate failures. Gmail, for example, won't load because of this: "accounts.google.com uses an invalid security certificate.The certificate is not trusted because no issuer chain was provided.".. that's even after adding a manual override. My bank's website won't open because the serial number is used on another certificate.. etc. etc.

I've tried all the commonly suggested solutions -- deleting cert8.db, uninstalling Firefox, creating new profiles, copying over profile from the old PC, creating a new profile under a new user... Nothing seems to have any effect. I tried Firefox 14, and 15 (beta), both as fresh installs. I tried disabling my antivirus and firewall (ESET).

I'm out of ideas. Chrome and IE work without any issues. All other PCs on the same home network behind the same router have Firefoxes that work fine.

Chosen solution

Which security software (firewall, anti-virus) do you have?

Some security software intercept secure connections and send their own certificate.

Some examples are ESET and Bitdefender.

  • ESET setup -> advanced setup -> extend web and email tree -> SSL
  • SSL protocol: Do not scan SSL protocol
  • BitDefender -> Privacy settings -> disable Scan SSL
Read this answer in context 11

Additional System Details

Installed Plug-ins

None

Application

  • User Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.1 (KHTML, like Gecko) Chrome/21.0.1180.79 Safari/537.1

More Information

Application Basics
Name
Firefox
Version
15.0
User Agent
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:15.0) Gecko/20100101 Firefox/15.0
Profile Folder
Show Folder
Enabled Plugins
about:plugins
Build Configuration
about:buildconfig
Crash Reports
about:crashes
Memory Use
about:memory
Extensions
Name
Version
Enabled
ID
Feedback
1.1.2
true
testpilot@labs.mozilla.com
Important Modified Preferences
Name
Value
browser.cache.disk.capacity
1048576
browser.cache.disk.smart_size.first_run
false
browser.places.smartBookmarksVersion
4
browser.startup.homepage_override.buildID
20120808131812
browser.startup.homepage_override.mstone
15.0
extensions.lastAppVersion
15.0
gfx.direct3d.prefer_10_1
true
network.cookie.prefsMigrated
true
places.history.expiration.transient_current_max_pages
104858
privacy.sanitize.migrateFx3Prefs
true
Graphics
Adapter Description
NVIDIA GeForce GTX 560
Vendor ID
0x10de
Device ID
0x1201
Adapter RAM
1023
Adapter Drivers
nvd3dumx,nvwgf2umx,nvwgf2umx nvd3dum,nvwgf2um,nvwgf2um
Driver Version
8.17.13.142
Driver Date
5-15-2012
Adapter Description (GPU #2)
Intel(R) HD Graphics 4000
Vendor ID (GPU #2)
0x8086
Device ID (GPU #2)
0x0162
Adapter RAM (GPU #2)
Unknown
Adapter Drivers (GPU #2)
igdumd64 igd10umd64 igd10umd64 igdumd32 igd10umd32 igd10umd32
Driver Version (GPU #2)
8.15.10.2696
Driver Date (GPU #2)
3-19-2012
Direct2D Enabled
true
DirectWrite Enabled
true (6.1.7601.17789)
ClearType Parameters
ClearType parameters not found
WebGL Renderer
Google Inc. -- ANGLE (NVIDIA GeForce GTX 560 ) -- OpenGL ES 2.0 (ANGLE 1.0.0.1041)
GPU Accelerated Windows
1/1 Direct3D 10
AzureBackend
direct2d
JavaScript
Incremental GC
0
Library Versions
Expected minimum version
Version in use
NSPR
4.9.1
4.9.1
NSS
3.13.5.0 Basic ECC
3.13.5.0 Basic ECC
NSS Util
3.13.5.0
3.13.5.0
NSS SSL
3.13.5.0 Basic ECC
3.13.5.0 Basic ECC
NSS S/MIME
3.13.5.0 Basic ECC
3.13.5.0 Basic ECC

Swarnava Sengupta 483 solutions 3135 answers

Try to remove the cert8.db file in the Firefox Profile Folder or rename the file to cert8.db.old to remove the intermediate certificates that Firefox has stored.

Firefox will automatically store new intermediate certificates when you visit websites that send them.


You can use this button to go to the Firefox profile folder:

  • Help > Troubleshooting Information > Profile Directory: Open Containing Folder
cor-el
  • Top 10 Contributor
  • Moderator
10780 solutions 97024 answers

Chosen Solution

Which security software (firewall, anti-virus) do you have?

Some security software intercept secure connections and send their own certificate.

Some examples are ESET and Bitdefender.

  • ESET setup -> advanced setup -> extend web and email tree -> SSL
  • SSL protocol: Do not scan SSL protocol
  • BitDefender -> Privacy settings -> disable Scan SSL

Question owner

Thanks! I didn't realize that ESET was scanning and replacing SSL certificates...