This site will have limited functionality while we undergo maintenance to improve your experience. If an article doesn't solve your issue and you want to ask a question, we have our support community waiting to help you at @FirefoxSupport on Twitter and/r/firefox on Reddit.

Avatar for Username

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

This thread was archived. Please ask a new question if you need help.

Window 8.1 update & invalid security certificate errors

  • 3 replies
  • 6 have this problem
  • 7 views
  • Last reply by schelf

schelf
schelf
more options

I set up my new PC 2 days ago running Windows 8.1. I was able to visit all websites, including secure ones, w/no issues via Firefox. Last night, suddenly I was unable to access many secure websites. These include Google (Gmail) & Ilines (email). Here is a copy of the Google error: "mail.google.com uses an invalid security certificate. The certificate is not trusted because the issuer certificate is unknown. (Error code: sec_error_unknown_issuer)" There is no button to bypass, as I have seen in the past. I tried deleting cert8.db which didn't resolve anything. I have also tried adding exceptions which also don't resolve the issue.

I searched support & found the link for the MS document (link below) indicating that FF & Windows Family Safety certificates are not playing nice. http://support.microsoft.com/kb/2965142/en-us#appliesto

I tried to follow the guide, but when I get to step 6, there is no Microsoft Family Safety Certificate in the Trusted Root Certificates Authorities to export. For reference, I do not specifically have Family Safety enabled & am running my PC as admin, no other users. I personally have no use for this but it is my understanding that it cannot be uninstalled, either.

I have spent hours researching & making adjustments to different settings to no avail. It is frustrating enough setting up a new PC & transferring info w/out this extra hassle. Does anyone have any other suggestions? FF is my preferred browser, but if this can't be resolved I will need to use something else so that I can access these important websites.

I set up my new PC 2 days ago running Windows 8.1. I was able to visit all websites, including secure ones, w/no issues via Firefox. Last night, suddenly I was unable to access many secure websites. These include Google (Gmail) & Ilines (email). Here is a copy of the Google error: "mail.google.com uses an invalid security certificate. The certificate is not trusted because the issuer certificate is unknown. (Error code: sec_error_unknown_issuer)" There is no button to bypass, as I have seen in the past. I tried deleting cert8.db which didn't resolve anything. I have also tried adding exceptions which also don't resolve the issue. I searched support & found the link for the MS document (link below) indicating that FF & Windows Family Safety certificates are not playing nice. http://support.microsoft.com/kb/2965142/en-us#appliesto I tried to follow the guide, but when I get to step 6, there is no Microsoft Family Safety Certificate in the Trusted Root Certificates Authorities to export. For reference, I do not specifically have Family Safety enabled & am running my PC as admin, no other users. I personally have no use for this but it is my understanding that it cannot be uninstalled, either. I have spent hours researching & making adjustments to different settings to no avail. It is frustrating enough setting up a new PC & transferring info w/out this extra hassle. Does anyone have any other suggestions? FF is my preferred browser, but if this can't be resolved I will need to use something else so that I can access these important websites.

All Replies (3)

cor-el
cor-el
  • Moderator
  • Top 10 Contributor
more options

Did you check the settings for Firefox in your Kaspersky security software about scanning secure connections?

Boot the computer in Windows Safe mode with network support (press F8 on the boot screen) as a test to see if that helps.

schelf
schelf Question owner
more options

Thanks for the feedback cor-el. Here are the results: 1. Installed Kaspersky certificate per link= no change 2. Turned off Kaspersky= able to log in to Gmail but not the other secure sites I am having probs with 3. Booted in Safe Networking mode= able to log in to Gmail but not the other secure sites. Same blocking errors on Gmail, etc when returned to reg mode.

Just FYI, I get 2 different secure connection errors: Gmail: "mail.google.com uses an invalid security certificate. The certificate is not trusted because the issuer certificate is unknown. (Error code: sec_error_unknown_issuer)" Ilines: "Secure Connection Failed An error occurred during a connection to mail.ilines.net. Peer's certificate has an invalid signature. (Error code: sec_error_bad_signature)"

schelf
schelf Question owner
more options

I disabled "scan encrypted connections" altogether in Kaspersky but it didn't seem to help. I restarted PC for another reason & it appears that I can now access all my secure websites again. 

Thanks for putting me on the trail of Kaspersky causing the issue.