Mozilla Relay is experiencing issues with call and text delivery. We’re working on a fix. Check Mozilla Status for updates.

This site will have limited functionality while we undergo maintenance to improve your experience. If an article doesn't solve your issue and you want to ask a question, we have our support community waiting to help you at @FirefoxSupport on Twitter and/r/firefox on Reddit.

Avatar for Username

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

This thread was archived. Please ask a new question if you need help.

Firefox doesn't recognize a certificate by Sectigo Ltd on certain Linux machines

  • 1 reply
  • 1 has this problem
  • 63 views
  • Last reply by info1972

info1972
info1972
more options

I try to open https://botcompany.de in Firefox 74.

On one Linux machine (Peppermint 10), it works fine.

On another Linux machine (Ubuntu 18.04), I get a certificate error (SEC_ERROR_UNKNOWN_ISSUER).

Where does this difference come from? I need my certificate to be recognized on all machines.

Thanks

I try to open https://botcompany.de in Firefox 74. On one Linux machine (Peppermint 10), it works fine. On another Linux machine (Ubuntu 18.04), I get a certificate error (SEC_ERROR_UNKNOWN_ISSUER). Where does this difference come from? I need my certificate to be recognized on all machines. Thanks

Chosen solution

Hey guys, problem SOLVED.

I needed to put the full chain instead of just the certificate in my keystore (webserver is written in Java). Posting the crucial code here to help others:

cat privkey.pem fullchain.pem >priv-and-cert.pem openssl pkcs12 -export -out keystore.p12 -in priv-and-cert.pem -name mydomain.name

Read this answer in context 👍 0

All Replies (1)

info1972
info1972 Question owner
more options

Chosen Solution

Hey guys, problem SOLVED.

I needed to put the full chain instead of just the certificate in my keystore (webserver is written in Java). Posting the crucial code here to help others:

cat privkey.pem fullchain.pem >priv-and-cert.pem openssl pkcs12 -export -out keystore.p12 -in priv-and-cert.pem -name mydomain.name