This site will have limited functionality while we undergo maintenance to improve your experience. If an article doesn't solve your issue and you want to ask a question, we have our support community waiting to help you at @FirefoxSupport on Twitter and/r/firefox on Reddit.

Avatar for Username

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

This thread was archived. Please ask a new question if you need help.

Does firefox have an updated list of certificates?

  • 3 replies
  • 1 has this problem
  • 6 views
  • Last reply by cor-el

robinf
robinf
more options

I am having an issue specifically in Firefox (v47) regarding certificates. It is showing "SEC_ERROR_UNKNOWN_ISSUER" but it is not an unknown issuer. The certificate tree is: GeoTrust Global CA > GeoTrust DV SSL CA - G3 > mywebsite.ca

I think that maybe one of the certificates in the tree is not on your certificate list as it's working in every other browser (not sure tho).

Let me know!


Thanks, Robin

I am having an issue specifically in Firefox (v47) regarding certificates. It is showing "SEC_ERROR_UNKNOWN_ISSUER" but it is not an unknown issuer. The certificate tree is: GeoTrust Global CA > GeoTrust DV SSL CA - G3 > mywebsite.ca I think that maybe one of the certificates in the tree is not on your certificate list as it's working in every other browser (not sure tho). Let me know! Thanks, Robin

All Replies (3)

FredMcD
FredMcD
more options

There is security software like Avast and Kaspersky and BitDefender and ESET that intercept secure connections and send their own certificate.

https://support.mozilla.org/kb/troubleshoot-SEC_ERROR_UNKNOWN_ISSUER

philipp
philipp
  • Moderator
more options

hi robin, your website might not provide a full certificate chain from an intermediate certificate to a trusted root certificate. you could check your site with a tool like https://www.ssllabs.com/ssltest/ and refer to the documentation of your certificate provider on how to properly implement it.

cor-el
cor-el
  • Moderator
  • Top 10 Contributor
more options

We have seen reports that the time as set via an internet based time service was so much out of sync that an error occurs, so if that is the case with your current service then try to switch to another time service.

Try to rename the cert8.db file (cert8.db.old) and delete the cert_override.txt file in the Firefox profile folder to remove intermediate certificates and exceptions that Firefox has stored.

If that has helped to solve the problem then you can remove the renamed cert8.db.old file.

Firefox will automatically store intermediate certificates that servers send in the Certificate Manager for future use.

You can use this button to go to the current Firefox profile folder: