Hello All, I struggle with Firefox and Windows CA. I have installed in AD Windows CA and I want also use Firefox. I generated certificates, propagated to clients and on Chrome and Edge everything works as well. Only on firefox i still have prompt about certificate: "MOZILLA_PKIX_ERROR_CA_CERT_USED_AS_END_ENTITY" Due to tutorials I have set up GPO where i force "security.enterprise_roots.enabled", true" option but it doesn't work. I have read the problem is with basicConstraints CA but I can't disable those module from certificate template in Windows CA. I have also accepted certificates in Firefox. What I can do to force Firefox to accept Windows CA certificates. Regards