hi josh, if this happened after the update to firefox 36, then it's most likely your site only offers weak encryption making use of the RC4 cipher suite which is considered broken and no longer trustworthy now. according to this recent proposal browsers have to stop supporting RC4: https://tools.ietf.org/html/rfc7465 https://developer.mozilla.org/en-US/Firefox/Releases/36/Site_Compatibility#Security

starting with firefox 38, the browser will show the error message and block access to affected sites...

Thanks for the fast response! I had no idea about that, and I do see that the site uses RC4.

I'll contact Bluehost right away and see what they can do about this.

And I just noticed I forgot to post our domain in the original question. Probably doesn't matter now, but it's https://motorthrust.com.

Fingers crossed Bluehost can help.

Thanks again! Josh

This should give you all the information you need. https://www.ssllabs.com/ssltest/analyze.html?d=motorthrust.com

I've run all the standard checks: http://www.networking4all.com/en/support/tools/site+check/

The above site returns: - Encryption strength is at least 2048-bit

This is a pretty silly statement, the 2048 bit key is used for authentication, not for encryption.

- Accepting only high encryption cipher suites

This is as silly as the above. I have no idea what 'high encryption cipher suites' are.

Thanks for the additional feedback. I forgot to mention that I had also used SSL labs; although, it doesn't specifically say why a browser won't show a padlock. Tons of awesome info, though.

Unfortunately, the fate of this is in Bluehost's hands, which is rarely a good thing...

You can also look at this extension:

• SSleuth: https://addons.mozilla.org/firefox/addon/ssleuth/

it doesn't specifically say why a browser won't show a padlock.

TLS is more than the browser just showing a padlock. https://support.mozilla.org/en-US/kb/how-do-i-tell-if-my-connection-is-secure