Join the AMA (Ask Me Anything) with the Firefox leadership team to celebrate Firefox 20th anniversary and discuss Firefox’s future on Mozilla Connect. Mark your calendar on Thursday, November 14, 18:00 - 20:00 UTC!

This site will have limited functionality while we undergo maintenance to improve your experience. If an article doesn't solve your issue and you want to ask a question, we have our support community waiting to help you at @FirefoxSupport on Twitter and/r/firefox on Reddit.

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

Natao arisiva ity resaka mitohy ity. Mametraha fanontaniana azafady raha mila fanampiana.

Self-signed wildcard SSL certificate not working on subdomains

  • 3 valiny
  • 1 manana an'ity olana ity
  • 7 views
  • Valiny farany nomen'i philipp

more options

We create a wildcard certificate for our domain to use in local intranet (*.oudomain.com). It works perfectly with Google Chrome and IE, but not working in FF 33 and later. Is there any solutions?

We create a wildcard certificate for our domain to use in local intranet (*.oudomain.com). It works perfectly with Google Chrome and IE, but not working in FF 33 and later. Is there any solutions?

All Replies (3)

more options

hello FireDex, what is the error code (under technical details) when you try to access the site?

more options

It says mozilla_pkix_error_ca_cert_used_as_end_entity

more options

thanks, mozilla's documentation for developers contains the following information for this error code:

What it means? A certificate with a basic constraints extension with cA:TRUE is being used as an end-entity certificate

What can I do? Re-generate the end-entity certificate without the basic constraints extension https://developer.mozilla.org/en-US/docs/Mozilla/Security/x509_Certificates#Error_Codes_in_Firefox_2