Join the AMA (Ask Me Anything) with the Firefox leadership team to celebrate Firefox 20th anniversary and discuss Firefox’s future on Mozilla Connect. Mark your calendar on Thursday, November 14, 18:00 - 20:00 UTC!

This site will have limited functionality while we undergo maintenance to improve your experience. If an article doesn't solve your issue and you want to ask a question, we have our support community waiting to help you at @FirefoxSupport on Twitter and/r/firefox on Reddit.

Avatar for Username

Cari Bantuan

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Pelajari Lebih Lanjut

Utas ini telah diarsipkan. Silakan membuat pertanyaan baru jika Anda membutuhkan bantuan.

Does firefox have an updated list of certificates?

  • 3 balas
  • 1 memiliki masalah ini
  • 6 kunjungan
  • Balasan terakhir oleh cor-el

robinf
robinf
more options

I am having an issue specifically in Firefox (v47) regarding certificates. It is showing "SEC_ERROR_UNKNOWN_ISSUER" but it is not an unknown issuer. The certificate tree is: GeoTrust Global CA > GeoTrust DV SSL CA - G3 > mywebsite.ca

I think that maybe one of the certificates in the tree is not on your certificate list as it's working in every other browser (not sure tho).

Let me know!


Thanks, Robin

I am having an issue specifically in Firefox (v47) regarding certificates. It is showing "SEC_ERROR_UNKNOWN_ISSUER" but it is not an unknown issuer. The certificate tree is: GeoTrust Global CA > GeoTrust DV SSL CA - G3 > mywebsite.ca I think that maybe one of the certificates in the tree is not on your certificate list as it's working in every other browser (not sure tho). Let me know! Thanks, Robin

Semua Balasan (3)

FredMcD
FredMcD
more options

There is security software like Avast and Kaspersky and BitDefender and ESET that intercept secure connections and send their own certificate.

https://support.mozilla.org/kb/troubleshoot-SEC_ERROR_UNKNOWN_ISSUER

philipp
philipp
  • Moderator
more options

hi robin, your website might not provide a full certificate chain from an intermediate certificate to a trusted root certificate. you could check your site with a tool like https://www.ssllabs.com/ssltest/ and refer to the documentation of your certificate provider on how to properly implement it.

cor-el
cor-el
  • Moderator
  • Top 10 Contributor
more options

We have seen reports that the time as set via an internet based time service was so much out of sync that an error occurs, so if that is the case with your current service then try to switch to another time service.

Try to rename the cert8.db file (cert8.db.old) and delete the cert_override.txt file in the Firefox profile folder to remove intermediate certificates and exceptions that Firefox has stored.

If that has helped to solve the problem then you can remove the renamed cert8.db.old file.

Firefox will automatically store intermediate certificates that servers send in the Certificate Manager for future use.

You can use this button to go to the current Firefox profile folder: