This site will have limited functionality while we undergo maintenance to improve your experience. If an article doesn't solve your issue and you want to ask a question, we have our support community waiting to help you at @FirefoxSupport on Twitter and/r/firefox on Reddit.

Avatar for Username

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

Hierdie gesprek is in die argief. Vra asseblief 'n nuwe vraag as jy hulp nodig het.

Secure Connection Failed

elzach
elzach
more options

I get this error message on several sites, including Yahoo and, unbelievably, this site (support.mozilla) as of a few hours ago:

"An error occurred during a connection to my.yahoo.com. Invalid OCSP signing certificate in OCSP response. (Error code: sec_error_ocsp_invalid_signing_cert)"

Once again, FF doesn't like certain certificates, including ones from "known" hackers, such as Yahoo (!)

I am using a vpn, but error shows up without it also.

Btw, all site load normally on IE ad Chrome.

I get this error message on several sites, including Yahoo and, unbelievably, this site (support.mozilla) as of a few hours ago: "An error occurred during a connection to my.yahoo.com. Invalid OCSP signing certificate in OCSP response. (Error code: sec_error_ocsp_invalid_signing_cert)" Once again, FF doesn't like certain certificates, including ones from "known" hackers, such as Yahoo (!) I am using a vpn, but error shows up without it also. Btw, all site load normally on IE ad Chrome.

All Replies (2)

guigs
guigs
more options

Please update to the most recent version of Firefox:

jscher2000 - Support Volunteer
jscher2000 - Support Volunteer
  • Top 10 Contributor
more options

OCSP is a way to check whether a certificate which appears legitimate has been revoked after issuance.

Although I haven't personally seen this error message mentioned here before, many users have certificate issues in Firefox due to incomplete setup with their security software (e.g., Kaspersky, ESET, BitDefender, AVAST) or because they have malware.

It probably is easiest to investigate that possibility in IE or Chrome where the page loads. Click the padlock icon in the address bar and view the certificate. Zero in on the Issuer/Issued by information. What do you find there, for example, for this site? I see "DigiCert High Assurance EV CA-1".