Important Notice: We're experiencing email notification issues. If you've posted a question in the community forums recently, please check your profile manually for responses while we're working to fix this.

On Monday the 3rd of March, around 5pm UTC (9am PT) users may experience a brief period of downtime while one of our underlying services is under maintenance.

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

Unable to add an exception for HSTS turned out to have a really bad downside

  • 1 reply
  • 1 has this problem
  • 4 views
  • Last reply by cor-el

more options

I'm sitting here looking at a website that's supposed to have an auto-renewing Let's Encrypt certificate that expired yesterday; the site is serving with active HSTS and an expired cert.

The loss of the VPN software is critical; we need this to work expired certificate or not. (Yes I can tell the difference between an expired cert and a forgery.)

I'm sitting here looking at a website that's supposed to have an auto-renewing Let's Encrypt certificate that expired yesterday; the site is serving with active HSTS and an expired cert. The loss of the VPN software is critical; we need this to work expired certificate or not. (Yes I can tell the difference between an expired cert and a forgery.)

All Replies (1)

more options

Maybe check this thread to see if there is something useful.

Note that this might be harder to fix in an outdated Firefox version like 84.0 that you use.