with today's update, all HTTPS sites are insecure.
examples:
Peer’s Certificate issuer is not recognized.
HTTP Strict Transport Security: false HTTP Public Key Pinning: false
Certificate chain:
BEGIN CERTIFICATE-----
MIIHfzCCBmegAwIBAgIJAI4q0JEAAAAAMA0GCSqGSIb3DQEBCwUAMIGfMQswCQYD VQQGEwJVUzELMAkGA1UECBMCV0kxDzANBgNVBAcTBlN1c3NleDEcMBoGA1UEChMT UXVhZC9HcmFwaGljcywgSW5jLjENMAsGA1UECxMESS5ULjEYMBYGA1UEAxMPc3hw cm94eTEucWcuY29tMSswKQYJKoZIhvcNAQkBFhxJVC1TZWN1cml0eU9wZXJhdGlv bnNAcWcuY29tMB4XDTE3MDUxOTAwMDAwMFoXDTE3MTAxNzEyMDAwMFowXjELMAkG A1UEBhMCVVMxCzAJBgNVBAgTAkNBMRIwEAYDVQQHEwlTdW5ueXZhbGUxFDASBgNV BAoMC1lhaG9vISBJbmMuMRgwFgYDVQQDDA8qLnd3dy55YWhvby5jb20wggEgMA0G CSqGSIb3DQEBAQUAA4IBDQAwggEIAoIBAQDm3YxgWwN+A18/IeplIUmp9de7Repw iCcyiOXgf9+bT14hK93q6Uq1Z7cdF06Sk7WAE1jNFK8KdvATgyWhDRSwlHYkZfRA RXViEKJVOlFpVlkbQtBnj546mXUKCdegKn4UXn5R61pXphoG0Y13vzfKQCOMcYZQ nkP7rHcX/G10xVAn9WJ8JHg49JdlWWMroO41ruKRg0RxdNLMBrIxZCkEbo6JG3mj +hDKgtu+TanYEbOytRvbVhZKJGZovd76v09IfBAH3krJEwmrpX6wQplhVXrrb2ym pqjR4PuYxcN/XbIWDp1vculGaLn37djmiRnXsky3hpxDajaZj/S2mX3jAgEDo4ID /jCCA/owCQYDVR0TBAIwADALBgNVHQ8EBAMCBeAwHwYDVR0jBBgwFoAUQJHhB6hZ URk2pYFUIqndd8C6CYgwggLnBgNVHREEggLeMIIC2oIPKi53d3cueWFob28uY29t ghBhZGQubXkueWFob28uY29tgg8qLmF0dC55YWhvby5jb22CDWF0dC55YWhvby5j b22CDGF1LnlhaG9vLmNvbYIMYmUueWFob28uY29tgg1icmIueWFob28uY29tggxi ci55YWhvby5jb22CD2NhLm15LnlhaG9vLmNvbYITY2Eucm9nZXJzLnlhaG9vLmNv bYIMY2EueWFob28uY29tghBkZGwuZnAueWFob28uY29tggxkZS55YWhvby5jb22C FGVuLW1ha3Rvb2IueWFob28uY29tghFlc3Bhbm9sLnlhaG9vLmNvbYIMZXMueWFo b28uY29tgg9mci1iZS55YWhvby5jb22CFmZyLWNhLnJvZ2Vycy55YWhvby5jb22C EmZyb250aWVyLnlhaG9vLmNvbYIMZnIueWFob28uY29tggxnci55YWhvby5jb22C DGhrLnlhaG9vLmNvbYIOaHNyZC55YWhvby5jb22CF2lkZWFuZXRzZXR0ZXIueWFo b28uY29tggxpZC55YWhvby5jb22CDGllLnlhaG9vLmNvbYIMaW4ueWFob28uY29t ggxpdC55YWhvby5jb22CEW1ha3Rvb2IueWFob28uY29tghJtYWxheXNpYS55YWhv by5jb22CDG15LnlhaG9vLmNvbYIMbnoueWFob28uY29tggxwaC55YWhvby5jb22C DHFjLnlhaG9vLmNvbYIMcm8ueWFob28uY29tggxzZS55YWhvby5jb22CDHNnLnlh aG9vL https://www.tdameritrade.com/home.page
Peer’s Certificate issuer is not recognized.
HTTP Strict Transport Security: false HTTP Public Key Pinning: false
Certificate chain:
BEGIN CERTIFICATE-----
MIIGPDCCBSSgAwIBAgIIKsVdkgAAAAAwDQYJKoZIhvcNAQELBQAwgZ8xCzAJBgNV BAYTAlVTMQswCQYDVQQIEwJXSTEPMA0GA1UEBxMGU3Vzc2V4MRwwGgYDVQQKExNR dWFkL0dyYXBoaWNzLCBJbmMuMQ0wCwYDVQQLEwRJLlQuMRgwFgYDVQQDEw9zeHBy b3h5MS5xZy5jb20xKzApBgkqhkiG9w0BCQEWHElULVNlY3VyaXR5T3BlcmF0aW9u c0BxZy5jb20wHhcNMTcwNDI1MDAwMDAwWhcNMTcxMjIxMjM1OTU5WjB4MQswCQYD VQQGEwJVUzERMA8GA1UECAwITmVicmFza2ExDjAMBgNVBAcMBU9NQUhBMRYwFAYD VQQKDA1URCBBbWVyaXRyYWRlMQ8wDQYDVQQLDAZBVEkgRUcxHTAbBgNVBAMMFHd3 dy50ZGFtZXJpdHJhZGUuY29tMIIBIDANBgkqhkiG9w0BAQEFAAOCAQ0AMIIBCAKC AQEAsuYzXwWDNknUkpEYqxAH/F7+F6XJ8GOZ6TwYm/dZcYxWfDFIN18ecW9vZCPf pMrc1KBqr878h12QDq+2Wwij7j7wWT/SwS/iP2hL/NbVaJ0yXx6I2OIWxSUgNS2n OHV5jcIDZSEx9iJynuY88wEHpGMmkQ6yB+euoAbpW7oj7avW50DdXFYf5jW6w6LI t6N99LQ3KJ7lEk6l/yFwBH0ieO2Wzrq+gQcjWzQVW9HtUrYXl88qIJh+VWNSi15H U0OwvL6mYXYDJCio+Y3ArFsSgbyXkT0TNsCion4MhTXaYjVJ8VP9AXzeMArkW9P/ QYripSZJu8Ovf0bQGtSCgsWwEwIBA6OCAqIwggKeMAkGA1UdEwQCMAAwCwYDVR0P BAQDAgXgMB8GA1UdIwQYMBaAFECR4QeoWVEZNqWBVCKp3XfAugmIMIIBiwYDVR0R BIIBgjCCAX6CIWVkZ2V0ZXN0LXd3dy50ZGFpbnN0aXR1dGlvbmFsLmNvbYIUd3d3 LnRkYW1lcml0cmFkZS5jb22CGHd3dy50ZGFpbnN0aXR1dGlvbmFsLmNvbYIdZWRn ZXRlc3Qtd3d3LnRkYW1lcml0cmFkZS5jb22CF3d3dy1qYy50ZGFtZXJpdHJhZGUu Y29tghxzdGFnaW5nLW5ldy50ZGFtZXJpdHJhZGUuY29tghh3d3ctcndkLnRkYW1l cml0cmFkZS5jb22CIDQwMWtmZWVhbmFseXplci50ZGFtZXJpdHJhZGUuY29tghRi ZXRhcy5hbWVyaXRyYWRlLmNvbYIWbWVkaWEudGRhbWVyaXRyYWRlLmNvbYIXd3d3 LXR4LnRkYW1lcml0cmFkZS5jb22CF3R4LXd3dy50ZGFtZXJpdHJhZGUuY29tghhz dGFnaW5nLnRkYW1lcml0cmFkZS5jb22CHWVkZ2V0ZXN0LWJldGFzLmFtZXJpdHJh ZGUuY29tMF8GCWCGSAGG+EIBDQRSFlAwQUUxNzc4RUU4RUIzMkM5RENDM0VFQUFD MzRCQjIxQkFwciAyNSAwMDowMDowMCAyMDE3IEdNVERlYyAyMSAyMzo1OTo1OSAy MDE3IEdNVDBzBgNVHSAEbDBqMGgGBFUdIAAwYDBeBggrBgEFBQcCAjBSGlAwQUUx Nzc4RUU4RUIzMkM5RENDM0VFQUFDMzRCQjIxQkFwciAyNSAwMDowMDowMCAyMDE3 IEdNVERlYyAyMSAyMzo1OTo1OSAyMDE3IEdNVDANBgkqhkiG9w0BAQsFAAOCAQEA W3XhtjXtP6fmsRJraFBjSrIS8A+Mu1g85TsHpdzaXAMlPrXWONiOEQ5FW8+YoYBo ntt/7t+YqQ1Fxp1mFZIPTYswo1Ffn3Kv0B3RH1jvWO6BF5CA1qXaqkVrQ5dkYhc4 v9REvqBr8+2ZQAKhx9teL6lnGVC5OX4HavpdItbvRDefhTD/ViiyoZzXlabv3HeD xv6EXe5URc+d1GtzhlThJsfNZ9w1nM7aheS/0WVEIg/25dDDxpwv1J6/OBI2quoN W0+T6LYt8wgWto3mIERdXiu6U8Rl1MCxbdeeKkRCtKEGN6AUmRO48JM/oSD6Z7+K LHbU3MqqUIsphsQNW/KGpA==
END CERTIFICATE-----
BEGIN CERTIFICATE-----
MIIEljCCA36gAwIBAgITZwAB/7ZFfnG9EZUXnwAAAAH/tjANBgkqhkiG9w0BAQsF ADBDMRMwEQYKCZImiZPyLGQBGRYDY29tMRIwEAYKCZImiZPyLGQBGRYCcWcxGDAW BgNVBAMTD1FHIFNYIElzc3VpbmcgMTAeFw0xNzAyMjMyMTUwMTdaFw0xOTAyMjMy MjAwMTdaMIGfMQswCQYDVQQGEwJVUzELMAkGA1UECBMCV0kxDzANBgNVBAcTBlN1 c3NleDEcMBoGA1UEChMTUXVhZC9HcmFwaGljcywgSW5jLjENMAsGA1UECxMESS5U LjEYMBYGA1UEAxMPc3hwcm94eTEucWcuY29tMSswKQYJKoZIhvcNAQkBFhxJVC1T ZWN1cml0eU9wZXJhdGlvbnNAcWcuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEA0L6mDJa4Eg97zAveZIavWjnVbbob7NQJJSfhLg65ym4/gpvwZm1G XV1O08JSXrNbJPsKAiV2G8CPArzyqEQ1382aKrYZeGSFQKBBF5UXp/7ccz4EgG6L ujctRFb/5ibmnqssEnPkt7twnzoWAL0gvLAvdB6tXpLZ4KjUpOdkaBzc8q/wF765 puf7nLHn/16V8JmlQgK5CLfTnwczVenNBvwWrsaKRJ869gLdelAEoUWkA+MPz/2P czvDKzuMROsh0pNgnLDdG5bBeJJUOBcBaxBeqwtB+w1Wvbbt4K5zN0Vge+L1naGW H4tkibX/2ONrq7/oEQp9SsSvwL+ekAu+LwIDAQABo4IBJDCCASAwHQYDVR0OBBYE FECR4QeoWVEZNqWBVCKp3XfAugmIMB8GA1UdIwQYMBaAFPFG3qLoajW7vCcUIkDr mhUknKzXMDoGA1UdHwQzMDEwL6AtoCuGKWh0dHA6Ly9jcmwucWcuY29tL1NYQ0FJ U1NVSU5HMS5xZy5jb20uY3JsMEUGCCsGAQUFBwEBBDkwNzA1BggrBgEFBQcwAoYp aHR0cDovL3BraS5xZy5jb20vU1hDQUlTU1VJTkcxLnFnLmNvbS5jcnQwDwYDVR0T AQH/BAUwAwEB/zALBgNVHQ8EBAMCAYYwPQYJKwYBBAGCNxUHBDAwLgYmKwYBBAGC NxUIg4DqCYKT31ODuY8hgcG9PYfrzE4AgefNSIfv8FICAWQCAQMwDQYJKoZIhvcN AQELBQADggEBAAliAy2bUB3zLkypEW34YFG9wrnVL/DZol0u7CvvOUye+U6Ax0wl mHfQHpDzepanEWWmHpD+MPiGteZLMYUyi+rSZyY1HhpnrYf2rzAa6LmzD8z0pt1t XT0FbjKiwgUlvxShQhD1WLYJKHQmxJIe0j4jITGiucwpl3YKa+1jQbBVBZwcK87s D1uK6YgV1acbldgcB0sBvBfYxhnzJ3fksYorekq1lySnkU1kGPXrHqYHgFvZID/D BdFHyClKfngqG1L13AkGlMtLt5HVD4cogmY+gYZEIfbUGVtth12fmzysVJDPJ//n zFbbk0A7K5Goyn7Bix93u0kZQv6h7TJzrLU=
END CERTIFICATE-----
BEGIN CERTIFICATE-----
MIIFgjCCA2qgAwIBAgITOgAAAAW7QR8k4LvV9gAAAAAABTANBgkqhkiG9w0BAQsF ADAUMRIwEAYDVQQDEwlRRyBSb290IDEwHhcNMTUxMjE3MTMwNTM0WhcNMjUxMjE3 MTMxNTM0WjBDMRMwEQYKCZImiZPyLGQBGRYDY29tMRIwEAYKCZImiZPyLGQBGRYC cWcxGDAWBgNVBAMTD1FHIFNYIElzc3VpbmcgMTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAKl5bHXszuRuYlJ3gRjALrVMdMfLhpVF/pzCpsLiplrrbnpk PN9TCo4EAViUIXdLuHXZ4ZPs5XsEY0DxPol0KaeR0DQKVAJtJF1+asrxb5+ecLWI B2ltFQrNEj5XnVH+1YHWy63JGAC+exwh9NQ1h7pm3Jlp0bM9q2axqYiB6Wi1ngqC Ly7cLCpHD/g1irRfJsWK1rRrAHeRfL9lusynyenhX8+0W5x5stKUUBP8psnPU/oJ gAPlW6GXBYLFhrozxDN0qA9L0cOejFY/4s4IRy7knXOim7YH2cDpRgqgneCP/rop T+sL4sJu33TfEGA8fYy/geCZQzSasNf2qYt+CG0CAwEAAaOCAZwwggGYMBAGCSsG AQQBgjcVAQQDAgEAMB0GA1UdDgQWBBTxRt6i6Go1u7wnFCJA65oVJJys1zCBmwYD VR0gBIGTMIGQMIGNBiEqhkiG9xQBvkCTeoLiB4PGXrZKgYgCgtAXh6GIXYa26GIw aDA6BggrBgEFBQcCAjAuHiwATABlAGcAYQBsACAAUABvAGwAaQBjAHkAIABTAHQA YQB0AGUAbQBlAG4AdDAqBggrBgEFBQcCARYeaHR0cDovL3BraS5xZy5jb20vcGtp L2Nwcy50eHQAMBkGCSsGAQQBgjcUAgQMHgoAUwB1AGIAQwBBMAsGA1UdDwQEAwIB hjAPBgNVHRMBAf8EBTADAQH/MB8GA1UdIwQYMBaAFLPqZRqu/gBE4jfi28mAY4NN AjY1MDAGA1UdHwQpMCcwJaAjoCGGH2h0dHA6Ly9jcmwucWcuY29tL1dBQ0FST09U MS5jcmwwOwYIKwYBBQUHAQEELzAtMCsGCCsGAQUFBzAChh9odHRwOi8vcGtpLnFn LmNvbS9XQUNBUk9PVDEuY3J0MA0GCSqGSIb3DQEBCwUAA4ICAQBWabq0SiOlsC8Y 2wgq40nz1pxxr7Hg8KrS2SYNMpViDbseWR+cr6793E/dLpAsoatQ7uDjmAJUjx21 vuRLrCcvdYnEFGB3/MzzXjH/OpKWcsQ5f8/endqYfqf0ZcZuGMBgB82cFunJQwmt DvVRo8N03VI/ygfYivMIjTilQHAx19j5XoLN3cih8LUlWf09xSdYBvpvxVdkXBPR VxKlbELhST+U3unCNGrQZO9nzKiilYId7t36vVDvBBZwtW4JQafVDkzhFC4zlRZu hNXqH7rfex0yfNq7DOiz7e3lfkU7fbB2BCQfR/WVEWn71dYpWlCTY83po5t4Bh64 kKGkJ/2xIvh8YP6pLxVVdF6uByw6slMZ4L8KVjkNKVs0CvomFbDzOrV6QG1cl6MG 2hryTfPCQzJMKBucO9TC02wqM0EHZFZu9fiVxMWE+jzsuDeilMt8C8R6Z94hJVKE fb+SW2XNgfNV5FxVCXt0O+cRvRxgM4LobpnDWhDfp56Pgrdt9avLkqhlmlXtIXbf /2Fd3njSOLFPhim+kvtkQyYVF/zhTtxiSjjFSjTbuGjGFPFCS1t3GrnaZs1d8Vja KVle1HToheWPXMcAoJ56cUlLfI/HUH+kLXmn4H7vlRI7AVFSJn66Z8KUuWoENbbW RQJJVkAnjfqTkjjGoPkeUG639qcf5g==
END CERTIFICATE-----
BEGIN CERTIFICATE-----
MIIFozCCA4ugAwIBAgIQEQDaG7UNnY1MckDszUj+ZTANBgkqhkiG9w0BAQsFADAU MRIwEAYDVQQDEwlRRyBSb290IDEwHhcNMTUxMTE4MTUxODM0WhcNMzUxMTE4MTUy ODI5WjAUMRIwEAYDVQQDEwlRRyBSb290IDEwggIiMA0GCSqGSIb3DQEBAQUAA4IC DwAwggIKAoICAQDPKluQzQmhqyxXYMumq6b8NWhPZIUCW7JZFJBXAS/rFJW7bV3i XPnvYx92FUhJEcw98Qn5O8jcOldopqbds5mMCUX4GgOtyI0WOUqW8MDg8EMqTy6E yHYVuUz189ofh5wuD7sxQarBKWZ09+FK5Q6RfA3JfNYxhp4PwfS5zaYO87/Q7yuY opw/M+rii73er/hT8zlHMDFWUjS9Wkd52TTFLbkylbK1IREhFAiZSXPy01c6oatm aWJ0Ssg0z9EvkDitsMLme6jTTfLfZLtGu/brHW0hBzlvYZs08O1+Uk4A6HCQVXmJ njE5Mrvi/Ry8orICuDdlr+g1pY64l5cbu4WFu84vo0id4DL+GUAtuNqITxOPvE3x zkwcDztdyiHIW6sncQt8EMV2jIigWHg44Qh9fc33Dr1ufys2XzOdvcvfz3i5id/K s4PxSuPrUJ631oVWh1dhsIVn7Y+uyDFX7Yyvdvg5BbpcMGRh+XarxBMBb9rAp8a4 5cKdL0jW9O1gkcW4yV7JDPm6dsYtZbGxV+6NxOsqEqWraITVTLqt+uJs3PcyE//o RIREMownm+Tz7PEywncW7dvVyUASplSVbTTJ7FUtu0gMECeXVSTq6K4Pf3TKMy/h yLQFw+b3pO389fyv2WT2I2c0sb5+7FS4JNad02zslZ4UI7AjTqd2B5A5MwIDAQAB o4HwMIHtMAsGA1UdDwQEAwIBhjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSz 6mUarv4AROI34tvJgGODTQI2NTAQBgkrBgEEAYI3FQEEAwIBADCBmwYDVR0gBIGT MIGQMIGNBiEqhkiG9xQBvkCTeoLiB4PGXrZKgYgCgtAXh6GIXYa26GIwaDA6Bggr BgEFBQcCAjAuHiwATABlAGcAYQBsACAAUABvAGwAaQBjAHkAIABTAHQAYQB0AGUA bQBlAG4AdDAqBggrBgEFBQcCARYeaHR0cDovL3BraS5xZy5jb20vcGtpL2Nwcy50 eHQAMA0GCSqGSIb3DQEBCwUAA4ICAQAszsu1mYpV8WTzTUttXzNNKRyy67vIqSyq t/tg52PAdkTUR09ConAzBrjpCI5ap679QCgO6zYAJppyrQAXjJlD7nUrebUAue21 MlfJv6/h/z7X8VFRya/3IkCoAIaDu5qcAv1B8vIBNcnQO8qszer0YFeIIv50yO12 lmq3sIUE7kVzeO//nI1DkgMQCIolF2fJ/ayOUO9FyJpjs69Xu82djc/Iy9Sl1JPK 3Q+fXwZ79eQr0hWdenZ41NOLHAoktHL1xaiDOxZzZ3/B7O4tOQFM0xJyzWwyVHy5 INLE/7JAU4u0eM8hDEelV2s9jyOYiRvXax4Hs+YhrouW+S0ifMy6MK8q5aFoy8LP
Solusi terpilih
Firefox also has a feature that I believe is designed for business environments which allows Firefox to trust certificates added to the Windows certificate store. I haven't tested this myself.
(1) In a new tab, type or paste about:config in the address bar and press Enter/Return. Click the button promising to be careful.
(2) In the search box above the list, type or paste roots and pause while the list is filtered
(3) Double-click the security.enterprise_roots.enabled preference to switch the value from false to true
That might take effect immediately or it might take effect after you exit Firefox and start it up again.
Baca jawaban ini dalam konteks 👍 0Semua Balasan (4)
Are you using a proxy?
You can check the connection settings.
- Options/Preferences -> Advanced -> Network : Connection -> Settings
- https://support.mozilla.org/en-US/kb/Options+window+-+Advanced+panel
If you do not need to use a proxy to connect to internet then try to select "No Proxy" if "Use the system proxy settings" or one of the others do not work properly.
See "Firefox connection settings":
this is a work computer; I cannot change the proxy settings. The change was an update, not a change in connection settings.
The second suggestion does not fit the symptoms. This describes an inability to load, not a security problem.
The certificates are issued by Quad/Graphics (QG)
- C=US, ST=WI, L=Sussex, O=Quad/Graphics, Inc., OU=I.T., CN=sxproxy1.qg.com, emailAddress=IT-SecurityOperations@qg.com
If you did refresh Firefox recently then you can check if you can find the cert8.db file in the "Old Firefox Data" folder on the desktop and copy this file to the current profile folder.
You can use the button on the "Help -> Troubleshooting Information" (about:support) page to go to the current Firefox profile folder or use the about:profiles page.
- Help -> Troubleshooting Information -> Profile Directory:
Windows: Show Folder; Linux: Open Directory; Mac: Show in Finder - http://kb.mozillazine.org/Profile_folder_-_Firefox
See also:
Solusi Terpilih
Firefox also has a feature that I believe is designed for business environments which allows Firefox to trust certificates added to the Windows certificate store. I haven't tested this myself.
(1) In a new tab, type or paste about:config in the address bar and press Enter/Return. Click the button promising to be careful.
(2) In the search box above the list, type or paste roots and pause while the list is filtered
(3) Double-click the security.enterprise_roots.enabled preference to switch the value from false to true
That might take effect immediately or it might take effect after you exit Firefox and start it up again.