Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

(Error code: sec_error_ocsp_unknown_cert)

  • 5 cavab
  • 130 have this problem
  • 4 views
  • Last reply by freddyb

more options

Normally when getting certificate error you can always allow it but this time i'm not getting the extra options to allow it ... And manually allowing or creating a certificate in firefox is not working either...

Its a known website of mine and its perfectly safe.

Normally when getting certificate error you can always allow it but this time i'm not getting the extra options to allow it ... And manually allowing or creating a certificate in firefox is not working either... Its a known website of mine and its perfectly safe.

Chosen solution

All Replies (5)

more options

Seçilmiş Həll

FIXED.

more options

I have the same problem. I got this error when I created a new SSL certificate for my personal website. It works fine in other browers, but not in Firefox.

I am wondering how you fixed this.

more options

Hi planck01

Could you please start a new thread instead of posting in an existing thread?


What kind of error do you get?

Make sure that you send all required intermediate certificates. Otherwise it only works if Firefox has stored the intermediate certificate from a previous visit to a web server that has send it.

You can check the OCSP setting:

  • Tools > Options > Advanced > Encryption: Certificates > Validation:
[X] "Use the Online Certificate Status Protocol (OCSP) to confirm the current validity of certificates" (security.OCSP.enabled)
[ ] "When an OCSP server connection fails, treat the certificate as invalid" (security.OCSP.require)
more options

I disabled OCSP :p

In mozilla advanced tab and certificates.

more options

I had the same error and the CA which generated my certificate was just too slow to handle their part quick enough. The solution is, sadly, to wait for a few hours and then switch over to the new certificate. Other CAs might be faster, but this is probably the price I paid for choosing the one that gives out certs for free :)