We're calling on all EU-based Mozillians with iOS or iPadOS devices to help us monitor Apple’s new browser choice screens. Join the effort to hold Big Tech to account!

This site will have limited functionality while we undergo maintenance to improve your experience. If an article doesn't solve your issue and you want to ask a question, we have our support community waiting to help you at @FirefoxSupport on Twitter and/r/firefox on Reddit.

Avatar for Username

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

This thread was archived. Jei jums reikia pagalbos, užduokite naują klausimą.

On some sites we get sec_error_unknown_issuer SSL error due to missing root certificate TC TrustCenter Class 2 L1 CA XI. Firefox is the only browser having this issue. Why is that certificate not preinstalled and shipped with Firefox?

  • 3 replies
  • 3 have this problem
  • 4 views
  • Paskiausią atsakymą parašė cor-el

spam@molfi.de
spam@molfi.de
more options

On some sites we get sec_error_unknown_issuer SSL error due to missing root certificate TC TrustCenter Class 2 L1 CA XI. Firefox is the only browser having this issue. Why is that certificate not preinstalled and shipped with Firefox?

Check sales.sauer-danfoss.com for details with Firefox 7. Thanks Stefan

On some sites we get sec_error_unknown_issuer SSL error due to missing root certificate TC TrustCenter Class 2 L1 CA XI. Firefox is the only browser having this issue. Why is that certificate not preinstalled and shipped with Firefox? Check sales.sauer-danfoss.com for details with Firefox 7. Thanks Stefan

All Replies (3)

cor-el
cor-el
  • Moderator
  • Top 10 Contributor
more options

You are not sending the TC TrustCenter Class 2 L1 CA XI intermediate certificate

Web servers need to send all required intermediate certificates to build the chain to build-in root certificates. You need to install that intermediate certificate on your server.

You can test the certificate chain via a site like this:

spam@molfi.de
spam@molfi.de Klausimą uždavęs asmuo
more options

We will go away from TC Trustcenter to Globalsign Thanks

cor-el
cor-el
  • Moderator
  • Top 10 Contributor
more options

You're welcome