Important Notice: We're experiencing email notification issues. If you've posted a question in the community forums recently, please check your profile manually for responses while we're working to fix this.

On Monday the 3rd of March, around 5pm UTC (9am PT) users may experience a brief period of downtime while one of our underlying services is under maintenance.

Avatar for Username

Przeszukaj pomoc

Unikaj oszustw związanych z pomocą.Nigdy nie będziemy prosić Cię o dzwonienie na numer telefonu, wysyłanie SMS-ów ani o udostępnianie danych osobowych. Zgłoś podejrzaną aktywność, korzystając z opcji „Zgłoś nadużycie”.

Więcej informacji

Wątek został zarchiwizowany. Jeśli potrzebujesz pomocy, zadaj nowe pytanie.

CA Signed Certificate shows as "not valid"

  • 4 odpowiedzi
  • 1 osoba ma ten problem
  • 492 wyświetlenia
  • Ostatnia odpowiedź od jCubed

jCubed
jCubed
more options

There is a certificate for an internal website that FireFox is saying is not valid/secure and it makes you add an exception. However, if you use IE, Edge or Chrome it loads fine with the valid CA Certificate. I've cleared all data (cache/etc...) and it hasn't fixed it. Hopefully someone has a fix for this?

Getting "SEC_ERROR_UNKNOWN_ISSUER" for the certificate and its saying: 

   Peer’s Certificate issuer is not recognized.
   HTTP Strict Transport Security: false
   HTTP Public Key Pinning: false


FireFox Version: 91.8.0esr (64-bit) Operating System: Windows 10 (64-bit)

There is a certificate for an internal website that FireFox is saying is not valid/secure and it makes you add an exception. However, if you use IE, Edge or Chrome it loads fine with the valid CA Certificate. I've cleared all data (cache/etc...) and it hasn't fixed it. Hopefully someone has a fix for this? Getting "SEC_ERROR_UNKNOWN_ISSUER" for the certificate and its saying: Peer’s Certificate issuer is not recognized. HTTP Strict Transport Security: false HTTP Public Key Pinning: false FireFox Version: 91.8.0esr (64-bit) Operating System: Windows 10 (64-bit)

Zmodyfikowany przez jCubed w dniu

Wybrane rozwiązanie

Firefox does not use the operating system certificate store by default.

Can you go to about:config and search for the preference

security.enterprise_roots.enabled

and change it to true and see if that fixes things?

Przeczytaj tę odpowiedź w całym kontekście 👍 1

Wszystkie odpowiedzi (4)

Mike Kaply
Mike Kaply
  • Moderator
more options

Wybrane rozwiązanie

Firefox does not use the operating system certificate store by default.

Can you go to about:config and search for the preference

security.enterprise_roots.enabled

and change it to true and see if that fixes things?

jCubed
jCubed Zadający pytanie
more options

So, that fixed it, thanks! But why would that matter? The certificate is loaded to the server itself. The certificate was not loaded to GPO, windows store or anything else. Only applied to the server itself.

Mike Kaply
Mike Kaply
  • Moderator
more options

My guess is that your company uses a custom certificate authority for that site (not a public one) and they load that CA into Windows expecting it to work.

jCubed
jCubed Zadający pytanie
more options

That could be. Just not disclosed to us after its generated on specifically what they did. Thanks!