Firefox Root Certificate Expiration: Questions & Tips for Updating
Important update! On March 14, 2025, a critical root certificate in Firefox will expire. If you’re still using an older version (before Firefox 128 or ESR 115.13+), it’s crucial to update to Firefox 128 or newer to avoid issues with add-ons, DRM-protected content, and other features.
For full details, check out Update Firefox to prevent add-ons issues from root certificate expiration.
If you have questions about the update or need help with the process, this is the place to ask! Whether you’re just starting or you’ve already updated and want to share your experience, we’d love to hear from you.
Let’s come together, share tips, and ensure we’re all prepared. Drop your questions or insights below!
Modified
All Replies (10)
As mentioned previously, please can you keep the language family friendly. I appreciate that people are concerned, but let's try to be civil about it before anyone has to be removed.
There are no plans to include this fix in versions of Firefox going back to 2017. This is the same stance taken for other security and stability fixed - you are best using the latest version of Firefox or at least the latest ESR version.
I do appreciate that you may be using older versions of operating systems that Firefox is not available for and that (certainly in the case of Apple hardware) it is not easy or low cost to replace. It is very likely that in these instances that your operating system is no longer receiving important security updates so while I do appreciate that you are concerned about Firefox, you really need to consider carefully updating your device.
i'm NOT asking for an "official" fix, i'm asking for an UNOFFICIAL HACK, maybe someone in community may be able to provide to keep firefox 56 (win7) and firefox 90 (linux mint) alive!
i know mozilla won't do anything for its users, mozilla always makes worst decisions AGAINST its users; this user hostile company had to introduce this now breaking certificate shenanigans in the first place - noone needs this idiocy! no wonder that firefox is losing more and more users!!!
and as i already mentioned in this thread: i RELY on firefox 56 (win7) due to addons not working anymore in later versions and i RELY on firefox 90 on linux mint as this is the LAST VERSION allowing me to disable that ugly proton cretinism mozilla had to shove down our throats!
thus i repeat: i will NOT, NEVER, NEVER EVER "update" (=DOWNGRADE) any of my firefox installations!!!
and which date is now true? january 14 as message in firefox 90 showed or march 14 mentioned here?
Modified
January 14 is when you will start to have some issues if using old versions, though that has not been the most clear as to what. It is March 14 when things like Extensions and such may stop working as explained in https://support.mozilla.org/en-US/kb/root-certificate-expiration
Mozilla has been quite good with supporting Firefox users with old eol OS's. For example they supported the then eol WinXP/Vista for over two years past when Chrome/Chromium based browsers dropped. At present they are still supporting the eol Windows 7, 8, 8.1 (and macOS 10.12, 10.13, 10.14) even though Chrome/Chromium based browsers dropped Windows 7, 8, 8.1 way back in Jan/Feb 2023.
They cannot be expected to support old OS's and old Firefox versions forever as things have to give as things progress on.
Which are the add-ons that you rely on?
one important example is chatzilla, which isn't supported in ff57 and newer since mozilla decided to make addons less powerful. i already mentioned that. other important addons not working due to these restrictions are all-in-one-gestures (mouse gestures which literally work everywhere, also in setting tabs, etc.) and glassmyfox, which making firefox look like aero theme in windows 7 just to name some extensions.
and i also use firefox 56 for downloading ftp stuff (like software for good old amiga os and ms dos which still is offered via ftp. ftp support also was removed in later versions of firefox.
Thank you.
The decision was not to make add-ons less powerful, but to make them more secure. Previously add-ons could do too much and this put the security of the web browser at risk. I appreciate that this is your choice to make, but for many other users, they would not know that the cool customisation that they had installed was now a security risk.
If you are still using these add-ons in an unsupported copy of Firefox on an unsupported operating system, you are taking quite a gamble.
Hi, happy new year.
Along with many other people, we have a Firefox availability problem.
I've been using my desktop Mac along with Firefox for many, many years. And I also have an obsolete application that Apple have stopped working past MacOS 10.12.6 which contains many years history that I simply cannot replace. In the cavalier way Apple drops support for older facilities, they seem happy to ignore their many long-time faithful users.
I need Firefox 102.15.1 ESR to keep working since I can't update my MacOS because later Firefox versions such as 115.18.0 ESR do not work on Sierra. Yet you say you are going to let the Firefox 102.15.1 ESR certificate expire without renewing it in March. Is there an insurmountably compelling reason why? Why? If there isn't, why not renew the certificate?
I am willing to pay for all the costs of renewing the Firefox certificate since I need Firefox 102.15.1 ESR to keep working on Sierra. Please let me know the cost and how to pay this.
So please keep Firefox working on Sierra, MacOS 10.12.6. What can I do to help make this happen?
Thank you for your cooperation in this very important matter. warm regards,
Cris Baker
[edited email]
ps. How much will the Firefox 102.15.1 ESR certificate renewal cost me?
Modified
CrisBCT said
Along with many other people, we have a Firefox availability problem. I need Firefox 102.15.1 ESR to keep working since I can't update my MacOS because later Firefox versions such as 115.18.0 ESR do not work on Sierra. So please keep Firefox working on Sierra, MacOS 10.12.6. What can I do to help make this happen?
Firefox 115 ESR is indeed available and runs on macOS 10.12, 10.13, 10.14
See https://support.mozilla.org/en-US/kb/firefox-users-macos-1012-1013-1014-moving-to-extended-support which talks about Firefox 115 ESR.
and from https://www.mozilla.org/firefox/115.19.0/system-requirements/ Mac macOS 10.12 macOS 10.13 macOS 10.14
Firefox 115.19.0esr.dmg for macOS 10.12, 10.13, 10.14 is available in links below https://archive.mozilla.org/pub/firefox/releases/115.19.0esr/mac/en-US/ other language folders https://archive.mozilla.org/pub/firefox/releases/115.19.0esr/mac/
In fact, Mozilla is only providing Firefox 115 ESR updates (since Fx 115.16.0esr+ on) to macOS 10.12, 10.13, 10.14 and Windows 7, 8, 8.1 OS users as macOS 10.15+, Linux and Windows 10,11 users are being served Firefox Release or updated from Firefox 115 ESR to Firefox 128 ESR in updates and downloads from mozilla.org.
The old eol Firefox 102 ESR has not received any updates since Fx 102.15.1esr released September 12, 2023.
Also nobody from Mozilla is going to contact a publicly posted email address and if they were to by chance contact you they would do so by private message on this community forum.
Modified
Note that this is a certificate that is built-in in Firefox and is used to download remote data that isn't included in Firefox but is downloaded from the server to get the latest version. Updating this certificate would require to release a new Firefox 78 version that comes with the new certificate and thus involves quite a few steps to compile and distribute.
Apple told me quite awhile ago that I could not update past Yosemite (10.10.5) if I wanted my iMac to work with my Adobe Creative Suite 6 so my plan has always been to get a second iMac and keep my old one just for design work. My question is whether email will continue to work on my old one so I can communicate between the two to transfer files.