Sök i support

Akta dig för supportbedrägerier: Vi kommer aldrig att be dig att ringa eller skicka ett sms till ett telefonnummer eller dela personlig information. Rapportera misstänkt aktivitet med alternativet "Rapportera missbruk".

Läs mer

(Error code: sec_error_ocsp_unknown_cert)

  • 5 svar
  • 130 har detta problem
  • 154 visningar
  • Senaste svar av freddyb

more options

Normally when getting certificate error you can always allow it but this time i'm not getting the extra options to allow it ... And manually allowing or creating a certificate in firefox is not working either...

Its a known website of mine and its perfectly safe.

Normally when getting certificate error you can always allow it but this time i'm not getting the extra options to allow it ... And manually allowing or creating a certificate in firefox is not working either... Its a known website of mine and its perfectly safe.

Vald lösning

Alla svar (5)

more options

Vald lösning

FIXED.

more options

I have the same problem. I got this error when I created a new SSL certificate for my personal website. It works fine in other browers, but not in Firefox.

I am wondering how you fixed this.

more options

Hi planck01

Could you please start a new thread instead of posting in an existing thread?


What kind of error do you get?

Make sure that you send all required intermediate certificates. Otherwise it only works if Firefox has stored the intermediate certificate from a previous visit to a web server that has send it.

You can check the OCSP setting:

  • Tools > Options > Advanced > Encryption: Certificates > Validation:
[X] "Use the Online Certificate Status Protocol (OCSP) to confirm the current validity of certificates" (security.OCSP.enabled)
[ ] "When an OCSP server connection fails, treat the certificate as invalid" (security.OCSP.require)
more options

I disabled OCSP :p

In mozilla advanced tab and certificates.

more options

I had the same error and the CA which generated my certificate was just too slow to handle their part quick enough. The solution is, sadly, to wait for a few hours and then switch over to the new certificate. Other CAs might be faster, but this is probably the price I paid for choosing the one that gives out certs for free :)