Join the AMA (Ask Me Anything) with the Firefox leadership team to celebrate Firefox 20th anniversary and discuss Firefox’s future on Mozilla Connect. Mark your calendar on Thursday, November 14, 18:00 - 20:00 UTC!

This site will have limited functionality while we undergo maintenance to improve your experience. If an article doesn't solve your issue and you want to ask a question, we have our support community waiting to help you at @FirefoxSupport on Twitter and/r/firefox on Reddit.

Avatar for Username

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

Hierdie gesprek is in die argief. Vra asseblief 'n nuwe vraag as jy hulp nodig het.

The Diginotar certificate is on the list of accepted certificates in Mozilla 7.0. Is this an oversight or did my update not work as it should have?

  • 2 antwoorde
  • 2 hierdie probleem
  • 1 view
  • Laaste antwoord deur pravinpillai

pravinpillai
pravinpillai
more options

I am very confident that Diginotar was removed from the list accepted certificates in my desktop Windows version of Mozilla 6.0.2. However, when I was fooling around in the security options in Mozilla 7.0, I noticed that DigiNotar and DigiNotar B.V. were on the list of accepted certificates. I'm curious whether the updates made by 6.0.1 and 6.0.2 were undone by v. 7.0

I am very confident that Diginotar was removed from the list accepted certificates in my desktop Windows version of Mozilla 6.0.2. However, when I was fooling around in the security options in Mozilla 7.0, I noticed that DigiNotar and DigiNotar B.V. were on the list of accepted certificates. I'm curious whether the updates made by 6.0.1 and 6.0.2 were undone by v. 7.0

Gekose oplossing

You can click the Edit button on the DigiNotar certificates to verify that all trust bits are unchecked.
That will make it impossible for them to be used as root certificates.

Select a DigiNotar certificate in the Certificate Manager.

  • Click the Edit button to verify that all trust bits are unchecked
  • Click the View button and go to Details to verify that the certificate has been deactivated (Explicitly Distrust DigiNotar Root CA)
Lees dié antwoord in konteks 👍 0

All Replies (2)

cor-el
cor-el
  • Moderator
  • Top 10 Contributor
more options

Gekose oplossing

You can click the Edit button on the DigiNotar certificates to verify that all trust bits are unchecked.
That will make it impossible for them to be used as root certificates.

Select a DigiNotar certificate in the Certificate Manager.

  • Click the Edit button to verify that all trust bits are unchecked
  • Click the View button and go to Details to verify that the certificate has been deactivated (Explicitly Distrust DigiNotar Root CA)
pravinpillai
pravinpillai Vraag-eienaar
more options

Thanks! I did verify that all the trust bits were unchecked for DigiNotar and Staat der Nederlanden certificates. The Details tab for Staat der Nederlanden did not explicitly state as in the case of DigiNotar that the certificate had been deactivated, but I'm assuming that's not a big deal because all the trust fields are unchecked.