This site will have limited functionality while we undergo maintenance to improve your experience. If an article doesn't solve your issue and you want to ask a question, we have our support community waiting to help you at @FirefoxSupport on Twitter and/r/firefox on Reddit.

Avatar for Username

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

Natao arisiva ity resaka mitohy ity. Mametraha fanontaniana azafady raha mila fanampiana.

Firefox doesn't recognize a certificate by Sectigo Ltd on certain Linux machines

  • 1 valiny
  • 1 manana an'ity olana ity
  • 2 views
  • Valiny farany nomen'i info1972

info1972
info1972
more options

I try to open https://botcompany.de in Firefox 74.

On one Linux machine (Peppermint 10), it works fine.

On another Linux machine (Ubuntu 18.04), I get a certificate error (SEC_ERROR_UNKNOWN_ISSUER).

Where does this difference come from? I need my certificate to be recognized on all machines.

Thanks

I try to open https://botcompany.de in Firefox 74. On one Linux machine (Peppermint 10), it works fine. On another Linux machine (Ubuntu 18.04), I get a certificate error (SEC_ERROR_UNKNOWN_ISSUER). Where does this difference come from? I need my certificate to be recognized on all machines. Thanks

Vahaolana nofidina

Hey guys, problem SOLVED.

I needed to put the full chain instead of just the certificate in my keystore (webserver is written in Java). Posting the crucial code here to help others:

cat privkey.pem fullchain.pem >priv-and-cert.pem openssl pkcs12 -export -out keystore.p12 -in priv-and-cert.pem -name mydomain.name

Hamaky an'ity valiny ity @ sehatra 👍 0

All Replies (1)

info1972
info1972 Tompon'ny fanontaniana
more options

Vahaolana Nofidina

Hey guys, problem SOLVED.

I needed to put the full chain instead of just the certificate in my keystore (webserver is written in Java). Posting the crucial code here to help others:

cat privkey.pem fullchain.pem >priv-and-cert.pem openssl pkcs12 -export -out keystore.p12 -in priv-and-cert.pem -name mydomain.name