Join the AMA (Ask Me Anything) with the Firefox leadership team to celebrate Firefox 20th anniversary and discuss Firefox’s future on Mozilla Connect. Mark your calendar on Thursday, November 14, 18:00 - 20:00 UTC!

This site will have limited functionality while we undergo maintenance to improve your experience. If an article doesn't solve your issue and you want to ask a question, we have our support community waiting to help you at @FirefoxSupport on Twitter and/r/firefox on Reddit.

Avatar for Username

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

This thread was archived. Please ask a new question if you need help.

HTTPS site certificates do not show full certificate chain of trust.

  • 1 reply
  • 2 have this problem
  • 1 view
  • Last reply by cor-el

pjtijerina
pjtijerina
more options

When I visit an HTTPS site that is signed by an Intermediate CA that is not yet in the Authorities list, the site comes up as untrusted. When I click on Add Exception, then click on the View button to view the certificate, and then go to the Details tab, the full certificate hierarchy is missing and only the issued certificate shows up. If I view the same certificate using Internet Explorer, I see the full hierarchy. Using https://share.ps.net as an example: GTE CyberTrust Global Root 

  Dell Inc. Enterprise CA
      Dell Inc. Enterprise Issuing CA1
          share.ps.net

But in FF, I only see share.ps.net in the heirarchy.

When I visit an HTTPS site that is signed by an Intermediate CA that is not yet in the Authorities list, the site comes up as untrusted. When I click on Add Exception, then click on the View button to view the certificate, and then go to the Details tab, the full certificate hierarchy is missing and only the issued certificate shows up. If I view the same certificate using Internet Explorer, I see the full hierarchy. Using https://share.ps.net as an example: GTE CyberTrust Global Root Dell Inc. Enterprise CA Dell Inc. Enterprise Issuing CA1 share.ps.net But in FF, I only see share.ps.net in the heirarchy.

All Replies (1)

cor-el
cor-el
  • Moderator
  • Top 10 Contributor
more options

That website doesn't send a full certificate chain and if you haven't visited a website before that sends them then you get the untrusted connection error.

You can visit this Dell website to make Firefox store those needed certificates.

No need to save anything yourself.