I'm receiving the "SEC_ERROR_UNKNOWN_ISSUER" error on secure websites (Gmail, Twitter, Wikipedia, etc)
I started receiving the SEC_ERROR_UNKNOWN_ISSUER on Gmail, Twitter, Wikipedia and other https sites. Additionally, LinkedIn and Reddit are displaying improperly--no images, stripped down like old html websites. There are no similar issues with either IE or Chrome. I went through the troubleshooting pages, and am not using any of the anti-virus, my system clock is fine, I deleted the cert8.db file, and an uninstall-reinstall didn't help either.
Chosen solution
Yeah, it was a backend issue on my network. Installing an additional certificate corrected the problem. Apparently other browsers install the necessary certificate automatically, but it has to be installed manually on Firefox sometimes.
Read this answer in context 👍 1All Replies (8)
hello, a solution depends on the individual circumstances:
- please also give us more information about the error by clicking on the error code, copying the text to the clipboard and then pasting it here into a reply in the forum.
thank you!
Peer’s Certificate issuer is not recognized.
HTTP Strict Transport Security: true HTTP Public Key Pinning: true
Certificate chain:
BEGIN CERTIFICATE-----
MIID3DCCAsSgAwIBAgIIG1O8Vb26v2wwDQYJKoZIhvcNAQELBQAwgbcxCzAJBgNV BAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMQ0wCwYDVQQHEwRELkMuMRQwEgYD VQQKEwtVLlMuIFNlbmF0ZTEjMCEGA1UECxMaU2VjdXJpdHkgT3BlcmF0aW9ucyBD ZW50ZXIxJjAkBgNVBAMTHVNlbmF0ZSBXZWIgQXNzdXJhbmNlIFBsYXRmb3JtMSEw HwYJKoZIhvcNAQkBFhJzb2NAc2FhLnNlbmF0ZS5nb3YwHhcNMTYxMDI2MDk1NTAw WhcNMTcwMTE4MDk1NTAwWjBjMQswCQYDVQQGEwJVUzETMBEGA1UECAwKQ2FsaWZv cm5pYTEWMBQGA1UEBwwNTW91bnRhaW4gVmlldzETMBEGA1UECgwKR29vZ2xlIElu YzESMBAGA1UEAwwJZ21haWwuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAqaj6JKQtCrOYcHOPFXpPvbq4j1jsX2Wuu4tfBtj5KknznGcSiXEneP+v FfWzCZ9ME5UHLeJFjmcEK4pwh3MTMeqOcGIMS4sAUi018FDZpKKA1MH+EqmP/le9 LGseISe/ZZu8RpGIH3Iqk89jAK0zL5NXghrskV9EBLpnkbGZN7MdtQr8KYCMJHlg BNWpesXkeYDrDa53FGHyvNp/95NNw71TI4cH+6AW8tUsAJT52gM9KLDMdyVt3oWo daCO7WRRXTb9c62NqFV2gHwNkqKJKwtFh6pOivATmhTmoj+0o+ha2g0gevvtsoAb hNOoC160Gq80uYzoflu+KdT/mtXN+QIDAQABoz8wPTA7BgNVHREENDAygglnbWFp bC5jb22CCyouZ21haWwuY29tghhwb2xpY3kubXRhLXN0cy5nbWFpbC5jb20wDQYJ KoZIhvcNAQELBQADggEBABMlRN66qgJKtu99uHMOHr98JIajbiEZrT7ZL6ZvXMgw TF1BhwbHWwEbSJiiVSGLcIbc1HwFTFmIgAcEPUihKYzm6b5WbWjtOuVA2BRWdNCt WeUAK5UESPkKqniFzOit4p5JMNXB+fvDNKXRG7gEyGxTZvx2q4yOOo8enAhfU+Ej X1sSbMAOQ1xOjEL9UoM+9w2bvEWZGQNywefQ5DiO9cHRWrqXNdAJG6J+8sdPpsck cufqX02dVbd4QCVzDJTnmiRZNzqqC7ZPTNAKpi8Ft/G0rZdhEGE8bCGe6njaeq1P 4n48J49gSinOqIRGqaX0T0/AlBI5/ENFdhrRUEomXik=
END CERTIFICATE-----
BEGIN CERTIFICATE-----
MIIH0zCCBbugAwIBAgIKYRxAiQABAAAADDANBgkqhkiG9w0BAQsFADA4MQswCQYD VQQGEwJVUzESMBAGA1UEChMJVVMgU2VuYXRlMRUwEwYDVQQDEwxBRE1BIFJPT1Qg Q0EwHhcNMTYwMjA1MTYwMTEwWhcNMjEwMjA1MTYxMTEwWjCBtzELMAkGA1UEBhMC VVMxEzARBgNVBAgTCldhc2hpbmd0b24xDTALBgNVBAcTBEQuQy4xFDASBgNVBAoT C1UuUy4gU2VuYXRlMSMwIQYDVQQLExpTZWN1cml0eSBPcGVyYXRpb25zIENlbnRl cjEmMCQGA1UEAxMdU2VuYXRlIFdlYiBBc3N1cmFuY2UgUGxhdGZvcm0xITAfBgkq hkiG9w0BCQEWEnNvY0BzYWEuc2VuYXRlLmdvdjCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAKmo+iSkLQqzmHBzjxV6T726uI9Y7F9lrruLXwbY+SpJ85xn EolxJ3j/rxX1swmfTBOVBy3iRY5nBCuKcIdzEzHqjnBiDEuLAFItNfBQ2aSigNTB /hKpj/5XvSxrHiEnv2WbvEaRiB9yKpPPYwCtMy+TV4Ia7JFfRAS6Z5GxmTezHbUK /CmAjCR5YATVqXrF5HmA6w2udxRh8rzaf/eTTcO9UyOHB/ugFvLVLACU+doDPSiw zHclbd6FqHWgju1kUV02/XOtjahVdoB8DZKiiSsLRYeqTorwE5oU5qI/tKPoWtoN IHr77bKAG4TTqAtetBqvNLmM6H5bvinU/5rVzfkCAwEAAaOCA10wggNZMB0GA1Ud DgQWBBQLTp24DAOla5SycJQkBkSMfZVD6DAfBgNVHSMEGDAWgBRqkBZAXAHvuYml 1295E+/H4WpHhTCCAV0GA1UdHwSCAVQwggFQMIIBTKCCAUigggFEhoG/bGRhcDov Ly9DTj1BRE1BJTIwUk9PVCUyMENBKDEpLENOPXVzLXJvb3QtcGswMSxDTj1DRFAs Q049UHVibGljJTIwS2V5JTIwU2VydmljZXMsQ049U2VydmljZXMsQ049Q29uZmln dXJhdGlvbixEQz11c3NlbmF0ZSxEQz11cz9jZXJ0aWZpY2F0ZVJldm9jYXRpb25M aXN0P2Jhc2U/b2JqZWN0Q2xhc3M9Y1JMRGlzdHJpYnV0aW9uUG9pbnSGP2h0dHA6 Ly9hZG1hcGtpMDEuc2hhcmVkLnVzc2VuYXRlLnVzL2NybC9BRE1BJTIwUk9PVCUy MENBKDEpLmNybIY/aHR0cDovL2FkbWFwa2kwMi5zaGFyZWQudXNzZW5hdGUudXMv Y3JsL0FETUElMjBST09UJTIwQ0EoMSkuY3JsMIIBeAYIKwYBBQUHAQEEggFqMIIB ZjCBrwYIKwYBBQUHMAKGgaJsZGFwOi8vL0NOPUFETUElMjBST09UJTIwQ0EsQ049 QUlBLENOPVB1YmxpYyUyMEtleSUyMFNlcnZpY2VzLENOPVNlcnZpY2VzLENOPUNv bmZpZ3VyYXRpb24sREM9dXNzZW5hdGUsREM9dXM/Y0FDZXJ0aWZpY2F0ZT9iYXNl P29iamVjdENsYXNzPWNlcnRpZmljYXRpb25BdXRob3JpdHkwWAYIKwYBBQUHMAKG TGh0dHA6Ly9hZG1hcGtpMDEuc2hhcmVkLnVzc2VuYXRlLnVzL2FpYS91cy1yb290 LXBrMDFfQURNQSUyMFJPT1QlMjBDQSgxKS5jcnQwWAYIKwYBBQUHMAKGTGh0dHA6 Ly9hZG1hcGtpMDIuc2hhcmVkLnVzc2VuYXRlLnVzL2FpYS91cy1yb290LXBrMDFf QURNQSUyMFJPT1QlMjBDQSgxKS5jcnQwGQYJKwYBBAGCNxQCBAweCgBTAHUAYgBD AEEwEgYDVR0TAQH/BAgwBgEB/wIBADALBgNVHQ8EBAMCAYYwDQYJKoZIhvcNAQEL BQADggIBAIpEfTSjc5SNKsTk7keJZF8a9z7FnkKDv6tZBpAF8C2DeKqKYljzKFJC /HVQPfQZKPVTXg9sc1A5kACvhBhfjlY+xE8yjfoKz/HHdDUziterAP0BkYbczZ6U Ss3j1tx+geyUrz0iRSXf9lFXhsKJU1lDI0l1ws9kXwvqFieVOmzSVubarVtZ2JkF JHGmNV2w3rt+Bm5PqXo/ou4+i9Q5jatV50Stoqm+hs2QCw5NdFJV/UNJ6WUq55A8 gFadwoyFGOiGD5/PylZFsrjXRczxeFM4JhkZtBsSsMQB5FOseYpYkFhzW8WRTUkW eyLiWzSoaiHdEYKWOMlzNXwBlQJOCnpzKwXahrYmU2o/4WlVr3ls1fvuGJIM0LLs ZkWIxekJZyZM3Sf0XBxVgMz3uvojh75vmtRVEpGve4qcJ9DRqD+9W7qxdLXYKrdv FksSnjWLxR5klplvM+QWSUPucKjAam/rntEttAwPWlvmyq8yB1qNiFHJTu5dTDp8 HHz7C6O+cvaiqkosXcFh/jChWr+RIAE3+08jcxmDRvUweIJxXn100G6M8gSuJpFl nl3pVcD8rhH0Xrgpxwb1M3AB5Z4WcBYXnqQgaFGbhMjNfQMLAf2G+4TJrJJBFZf/ aZYS0zSdaaI7FPIolylJh+zcRsn8O4V6oxkz875t97BHiJfyD92s
END CERTIFICATE-----
thanks. so it appears that secure connections get intercepted and monitored in your network environment by using a certificate that is unknown and therefore untrusted by firefox.
you could try if the following steps can address the issue: enter about:config into the firefox address bar (confirm the info message in case it shows up). right-click somewhere on the page to create a new boolean preference - name it security.enterprise_roots.enabled and set its value to false. then restart firefox.
otherwise if this didn't help either you should get in contact with your it department about how to best resolve that...
Does the interception imply malware or some other security breach?
on the outset no, it's coming from the following issuer:
emailAddress = soc@saa.senate.gov commonName = Senate Web Assurance Platform organizationalUnitName = Security Operations Center organizationName = U.S. Senate localityName = D.C. stateOrProvinceName = Washington countryName = US
The security.enterprise_roots.enabled boolean preference didn't work either. Thank you, though, for your help and for looking into it. I'll check with my IT people.
Andrew (-AT) from the @firefox Twitter, just following up to see if you've made any progress with your IT department.
Cheers!
Chosen Solution
Yeah, it was a backend issue on my network. Installing an additional certificate corrected the problem. Apparently other browsers install the necessary certificate automatically, but it has to be installed manually on Firefox sometimes.