Avatar for Username

搜索 | 用户支持

防范以用户支持为名的诈骗。我们绝对不会要求您拨打电话或发送短信，及提供任何个人信息。请使用“举报滥用”选项报告涉及违规的行为。

Learn More

话题已存档。 如果需要帮助请提出新问题。

Revoked old certificate and Firefox thinks the new certificate is revoked

  • 2 个回答
  • 1 人有此问题
  • 2 次查看
  • 最后回复者为 dpbaker57

dpbaker57
dpbaker57
more options

I have a site where the old certificate was about to expire. I installed a new one and revoked the previous certificate. Now Firefox and only Firefox is reporting the new certificate as expired. Safari, Edge, IE, and Chrome are all seeing the new certificate as valid. Anyone have a clue as how to fix this?

I have a site where the old certificate was about to expire. I installed a new one and revoked the previous certificate. Now Firefox and only Firefox is reporting the new certificate as expired. Safari, Edge, IE, and Chrome are all seeing the new certificate as valid. Anyone have a clue as how to fix this?

所有回复 (2)

jscher2000 - Support Volunteer
jscher2000 - Support Volunteer
  • Top 10 Contributor
more options

Firefox still uses OCSP, unlike some other browsers.

Could you double-check using: https://www.ssllabs.com/ssltest/

If you think Firefox may have cached the old certificate and that is preventing it from seeing the new one, and that persists after a normal browser restart, you could consider removing the cert9.db file as mentioned in this article: What do the security warning codes mean?

dpbaker57
dpbaker57 提问者
more options

From more research it appears Firefox still is using the CRL file. My CA seems to have screwed up and put the new certificate's serial number in the CRL file. I am installing a new certificate.