Certificate error on some Google domains
Hi,
I am getting an SEC_ERROR_UNKNOWN_ISSUER on some (but not all) Google domains, YouTube for example. I am only getting the certificate error inside Firefox (I also have Chrome and Safari and they don't report a problem) and I *am* continuing to get the error while in safe mode (with all extensions disabled). I have added the troubleshooting info to this post, so feel free to check out the plug-ins I have installed.
I have read the troubleshooting guide on SEC_ERROR_UNKNOWN_ISSUER and I do not have any of the problems listed there. For example: I do not have any AV installed and my timezone and date/time are correct.
I've gone though the certificate chain (see reply - the chain is too large to put into this post) and the root cert looks off to me. It claims to be 'GeoTrust Global CA' but the fingerprint does _not_ match the fingerprint of the cert visible in the Certificate Manager (Preferences -> Privacy & Security -> View Certificates -> Authorities -> GeoTrust Global CA -> View) and the Issuer is 'O=Equifax, OU=Equifax Secure Certificate Authority' whereas it should be 'O=GeoTrust Inc. OU=GeoTrust Global CA'.
I think this problem only manifested itself yesterday (perhaps the day before), and I haven't installed any new software recently (although it is possible something may have updated itself).
Now, I suspect that I could make this all go away by trashing or refreshing my profile, but I'd quite like to know where this cert is coming from. If I do happen to have a rouge plugin (or similar) then I'd prefer to know.
All help and suggestions welcome. Thanks in advance!
Chosen solution
I have just seen the discussion at https://support.mozilla.org/en-US/questions/1200716 and I see that this seems to be a (hopefully temporary) problem with the Google OCSP server.
I'll set 'security.OCSP.require' to 'false' for the next couple of days. Hopefully Google will fix this soon.
Ler a resposta no contexto 👍 1All Replies (3)
First part:
Peer’s Certificate issuer is not recognized.
HTTP Strict Transport Security: false HTTP Public Key Pinning: false
Certificate chain:
BEGIN CERTIFICATE-----
MIIWsDCCFZigAwIBAgIIPigcD007MrAwDQYJKoZIhvcNAQELBQAwSTELMAkGA1UE BhMCVVMxEzARBgNVBAoTCkdvb2dsZSBJbmMxJTAjBgNVBAMTHEdvb2dsZSBJbnRl cm5ldCBBdXRob3JpdHkgRzIwHhcNMTgwMTEwMDkzOTAwWhcNMTgwNDA0MDkzOTAw WjBuMQswCQYDVQQGEwJVUzETMBEGA1UECAwKQ2FsaWZvcm5pYTEWMBQGA1UEBwwN TW91bnRhaW4gVmlldzETMBEGA1UECgwKR29vZ2xlIEluYzEdMBsGA1UEAwwUbWlz Yy1zbmkueW91dHViZS5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCR++QRedO6Xve5t0HzVmwHPq4ozQyRzymjbaWG7nchUwXkrg5VZ6gKMVIWIKKO ETJJTc396SaijkZlDhoenaXjpfgfhgoVfyA4LEnBb+XVgZnQPQmfWZlLMwZtk2fw O2LQfEdkKP9NuSRff8/4iOpmYRajwinLQgiGCmBhu+odr3lrfO7yfvAbwADeRUYg NRMZ6w2iTvX72oe/6mNy/RLyzFsVV+K75XuUq5dfxCyoGyx5FTPOYaiGHbs8EzzB 9TCnN5hRIHwTcQ3BAdFtNTbdENl7kTroBAv7VER1xyim/VLIQIKAH0VwJY5HX0nK KPbBWo6g0phO2VLBphnP9hUDAgMBAAGjghN1MIITcTATBgNVHSUEDDAKBggrBgEF BQcDATCCEksGA1UdEQSCEkIwghI+ghRtaXNjLXNuaS55b3V0dWJlLmNvbYIMKi55 b3V0dWJlLmFlggwqLnlvdXR1YmUuYWyCDCoueW91dHViZS5hbYIMKi55b3V0dWJl LmF0ggwqLnlvdXR1YmUuYXqCDCoueW91dHViZS5iYYIMKi55b3V0dWJlLmJlggwq LnlvdXR1YmUuYmeCDCoueW91dHViZS5iaIIMKi55b3V0dWJlLmJvggwqLnlvdXR1 YmUuYnmCDCoueW91dHViZS5jYYINKi55b3V0dWJlLmNhdIIMKi55b3V0dWJlLmNo ggwqLnlvdXR1YmUuY2yCDCoueW91dHViZS5jb4IPKi55b3V0dWJlLmNvLmFlgg8q LnlvdXR1YmUuY28uYXSCDyoueW91dHViZS5jby5jcoIPKi55b3V0dWJlLmNvLmh1 gg8qLnlvdXR1YmUuY28uaWSCDyoueW91dHViZS5jby5pbIIPKi55b3V0dWJlLmNv Lmlugg8qLnlvdXR1YmUuY28uanCCDyoueW91dHViZS5jby5rZYIPKi55b3V0dWJl LmNvLmtygg8qLnlvdXR1YmUuY28ubWGCDyoueW91dHViZS5jby5ueoIPKi55b3V0 dWJlLmNvLnRogg8qLnlvdXR1YmUuY28udHqCDyoueW91dHViZS5jby51Z4IPKi55 b3V0dWJlLmNvLnVrgg8qLnlvdXR1YmUuY28udmWCDyoueW91dHViZS5jby56YYIP Ki55b3V0dWJlLmNvLnp3gg0qLnlvdXR1YmUuY29tghAqLnlvdXR1YmUuY29tLmFy ghAqLnlvdXR1YmUuY29tLmF1ghAqLnlvdXR1YmUuY29tLmF6ghAqLnlvdXR1YmUu Y29tLmJkghAqLnlvdXR1YmUuY29tLmJoghAqLnlvdXR1YmUuY29tLmJvghAqLnlv dXR1YmUuY29tLmJyghAqLnlvdXR1YmUuY29tLmJ5ghAqLnlvdXR1YmUuY29tLmNv ghAqLnlvdXR1YmUuY29tLmRvghAqLnlvdXR1YmUuY29tLmVjghAqLnlvdXR1YmUu Y29tLmVlghAqLnlvdXR1YmUuY29tLmVnghAqLnlvdXR1YmUuY29tLmVzghAqLnlv dXR1YmUuY29tLmdoghAqLnlvdXR1YmUuY29tLmdyghAqLnlvdXR1YmUuY29tLmd0 ghAqLnlvdXR1YmUuY29tLmhrghAqLnlvdXR1YmUuY29tLmhughAqLnlvdXR1YmUu Y29tLmhyghAqLnlvdXR1YmUuY29tLmptghAqLnlvdXR1YmUuY29tLmpvghAqLnlv dXR1YmUuY29tLmt3ghAqLnlvdXR1YmUuY29tLmxighAqLnlvdXR1YmUuY29tLmx2 ghAqLnlvdXR1YmUuY29tLmx5ghAqLnlvdXR1YmUuY29tLm1rghAqLnlvdXR1YmUu Y29tLm10ghAqLnlvdXR1YmUuY29tLm14ghAqLnlvdXR1YmUuY29tLm15ghAqLnlv dXR1YmUuY29tLm5nghAqLnlvdXR1YmUuY29tLm5pghAqLnlvdXR1YmUuY29tLm9t ghAqLnlvdXR1YmUuY29tLnBhghAqLnlvdXR1YmUuY29tLnBlghAqLnlvdXR1YmUu Y29tLnBoghAqLnlvdXR1YmUuY29tLnBrghAqLnlvdXR1YmUuY29tLnB0ghAqLnlv dXR1YmUuY29tLnB5ghAqLnlvdXR1YmUuY29tLnFhghAqLnlvdXR1YmUuY29tLnJv ghAqLnlvdXR1YmUuY29tLnNhghAqLnlvdXR1YmUuY29tLnNnghAqLnlvdXR1YmUu Y29tLnN2ghAqLnlvdXR1YmUuY29tLnRughAqLnlvdXR1YmUuY29tLnRyghAqLnlv dXR1YmUuY29tLnR3ghAqLnlvdXR1YmUuY29tLnVhghAqLnlvdXR1YmUuY29tLnV5 ghAqLnlvdXR1YmUuY29tLnZlggwqLnlvdXR1YmUuY3KCDCoueW91dHViZS5jeoIM Ki55b3V0dWJlLmRlggwqLnlvdXR1YmUuZGuCDCoueW91dHViZS5lZYIMKi55b3V0 dWJlLmVzggwqLnlvdXR1YmUuZmmCDCoueW91dHViZS5mcoIMKi55b3V0dWJlLmdl ggwqLnlvdXR1YmUuZ3KCDCoueW91dHViZS5ndIIMKi55b3V0dWJlLmhrggwqLnlv dXR1YmUuaHKCDCoueW91dHViZS5odYIMKi55b3V0dWJlLmllggwqLnlvdXR1YmUu aW6CDCoueW91dHViZS5pcYIMKi55b3V0dWJlLmlzggwqLnlvdXR1YmUuaXSCDCou eW91dHViZS5qb4IMKi55b3V0dWJlLmpwggwqLnlvdXR1YmUua3KCDCoueW91dHVi ZS5reoIMKi55b3V0dWJlLmxhggwqLnlvdXR1YmUubGuCDCoueW91dHViZS5sdIIM Ki55b3V0dWJlLmx1ggwqLnlvdXR1YmUubHaCDCoueW91dHViZS5seYIMKi55b3V0 dWJlLm1hggwqLnlvdXR1YmUubWSCDCoueW91dHViZS5tZYIMKi55b3V0dWJlLm1r ggwqLnlvdXR1YmUubW6CDCoueW91dHViZS5teIIMKi55b3V0dWJlLm15ggwqLnlv dXR1YmUubmeCDCoueW91dHViZS5uaYIMKi55b3V0dWJlLm5sggwqLnlvdXR1YmUu bm+CDCoueW91dHViZS5wYYIMKi55b3V0dWJlLnBlggwqLnlvdXR1YmUucGiCDCou eW91dHViZS5wa4IMKi55b3V0dWJlLnBsggwqLnlvdXR1YmUucHKCDCoueW91dHVi ZS5wdIIMKi55b3V0dWJlLnFhggwqLnlvdXR1YmUucm+CDCoueW91dHViZS5yc4IM Ki55b3V0dWJlLnJ1ggwqLnlvdXR1YmUuc2GCDCoueW91dHViZS5zZYIMKi55b3V0 dWJlLnNnggwqLnlvdXR1YmUuc2mCDCoueW91dHViZS5za4IMKi55b3V0dWJlLnNu gg0qLnlvdXR1YmUuc295ggwqLnlvdXR1YmUuc3aCDCoueW91dHViZS50boIMKi55 b3V0dWJlLnR2ggwqLnlvdXR1YmUudWGCDCoueW91dHViZS51Z4IMKi55b3V0dWJl LnV5ggwqLnlvdXR1YmUudm6CESoueW91dHViZWdvLmNvLmlkghEqLnlvdXR1YmVn by5jby5pboIPKi55b3V0dWJlZ28uY29tghIqLnlvdXR1YmVnby5jb20uYnKCDiou eW91dHViZWdvLmlkgg4qLnlvdXR1YmVnby5pboIKeW91dHViZS5hZYIKeW91dHVi ZS5hbIIKeW91dHViZS5hbYIKeW91dHViZS5hdIIKeW91dHViZS5heoIKeW91dHVi ZS5iYYIKeW91dHViZS5iZYIKeW91dHViZS5iZ4IKeW91dHViZS5iaIIKeW91dHVi ZS5ib4IKeW91dHViZS5ieYIKeW91dHViZS5jYYILeW91dHViZS5jYXSCCnlvdXR1 YmUuY2iCCnlvdXR1YmUuY2yCCnlvdXR1YmUuY2+CDXlvdXR1YmUuY28uYWWCDXlv dXR1YmUuY28uYXSCDXlvdXR1YmUuY28uY3KCDXlvdXR1YmUuY28uaHWCDXlvdXR1 YmUuY28uaWSCDXlvdXR1YmUuY28uaWyCDXlvdXR1YmUuY28uaW6CDXlvdXR1YmUu Y28uanCCDXlvdXR1YmUuY28ua2WCDXlvdXR1YmUuY28ua3KCDXlvdXR1YmUuY28u bWGCDXlvdXR1YmUuY28ubnqCDXlvdXR1YmUuY28udGiCDXlvdXR1YmUuY28udHqC DXlvdXR1YmUuY28udWeCDXlvdXR1YmUuY28udWuCDXlvdXR1YmUuY28udmWCDXlv dXR1YmUuY28uemGCDXlvdXR1YmUuY28ueneCC3lvdXR1YmUuY29tgg55b3V0dWJl LmNvbS5hcoIOeW91dHViZS5jb20uYXWCDnlvdXR1YmUuY29tLmF6gg55b3V0dWJl LmNvbS5iZIIOeW91dHViZS5jb20uYmiCDnlvdXR1YmUuY29tLmJvgg55b3V0dWJl LmNvbS5icoIOeW91dHViZS5jb20uYnmCDnlvdXR1YmUuY29tLmNvgg55b3V0dWJl LmNvbS5kb4IOeW91dHViZS5jb20uZWOCDnlvdXR1YmUuY29tLmVlgg55b3V0dWJl LmNvbS5lZ4IOeW91dHViZS5jb20uZXOCDnlvdXR1YmUuY29tLmdogg55b3V0dWJl LmNvbS5ncoIOeW91dHViZS5jb20uZ3SCDnlvdXR1YmUuY29tLmhrgg55b3V0dWJl LmNvbS5oboIOeW91dHViZS5jb20uaHKCDnlvdXR1YmUuY29tLmptgg55b3V0dWJl LmNvbS5qb4IOeW91dHViZS5jb20ua3eCDnlvdXR1YmUuY29tLmxigg55b3V0dWJl LmNvbS5sdoIOeW91dHViZS5jb20ubHmCDnlvdXR1YmUuY29tLm1rgg55b3V0dWJl LmNvbS5tdIIOeW91dHViZS5jb20ubXiCDnlvdXR1YmUuY29tLm15gg55b3V0dWJl LmNvbS5uZ4IOeW91dHViZS5jb20ubmmCDnlvdXR1YmUuY29tLm9tgg55b3V0dWJl LmNvbS5wYYIOeW91dHViZS5jb20ucGWCDnlvdXR1YmUuY29tLnBogg55b3V0dWJl LmNvbS5wa4IOeW91dHViZS5jb20ucHSCDnlvdXR1YmUuY29tLnB5gg55b3V0dWJl LmNvbS5xYYIOeW91dHViZS5jb20ucm+CDnlvdXR1YmUuY29tLnNhgg55b3V0dWJl LmNvbS5zZ4IOeW91dHViZS5jb20uc3aCDnlvdXR1YmUuY29tLnRugg55b3V0dWJl LmNvbS50coIOeW91dHViZS5jb20udHeCDnlvdXR1YmUuY29tLnVhgg55b3V0dWJl LmNvbS51eYIOeW91dHViZS5jb20udmWCCnlvdXR1YmUuY3KCCnlvdXR1YmUuY3qC CnlvdXR1YmUuZGWCCnlvdXR1YmUuZGuCCnlvdXR1YmUuZWWCCnlvdXR1YmUuZXOC CnlvdXR1YmUuZmmCCnlvdXR1YmUuZnKCCnlvdXR1YmUuZ2WCCnlvdXR1YmUuZ3KC CnlvdXR1YmUuZ3SCCnlvdXR1YmUuaGuCCnlvdXR1YmUuaHKCCnlvdXR1YmUuaHWC CnlvdXR1YmUuaWWCCnlvdXR1YmUuaW6CCnlvdXR1YmUuaXGCCnlvdXR1YmUuaXOC CnlvdXR1YmUuaXSCCnlvdXR1YmUuam+CCnlvdXR1YmUuanCCCnlvdXR1YmUua3KC CnlvdXR1YmUua3qCCnlvdXR1YmUubGGCCnlvdXR1YmUubGuCCnlvdXR1YmUubHSC CnlvdXR1YmUubHWCCnlvdXR1YmUubHaCCnlvdXR1YmUubHmCCnlvdXR1YmUubWGC CnlvdXR1YmUubWSCCnlvdXR1YmUubWWCCnlvdXR1YmUubWuCCnlvdXR1YmUubW6C CnlvdXR1YmUubXiCCnlvdXR1YmUubXmCCnlvdXR1YmUubmeCCnlvdXR1YmUubmmC CnlvdXR1YmUubmyCCnlvdXR1YmUubm+CCnlvdXR1YmUucGGCCnlvdXR1YmUucGWC CnlvdXR1YmUucGiCCnlvdXR1YmUucGuCCnlvdXR1YmUucGyCCnlvdXR1YmUucHKC CnlvdXR1YmUucHSCCnlvdXR1YmUucWGCCnlvdXR1YmUucm+CCnlvdXR1YmUucnOC CnlvdXR1YmUucnWCCnlvdXR1YmUuc2GCCnlvdXR1YmUuc2WCCnlvdXR1YmUuc2eC CnlvdXR1YmUuc2mCCnlvdXR1YmUuc2uCCnlvdXR1YmUuc26CC3lvdXR1YmUuc295 ggp5b3V0dWJlLnN2ggp5b3V0dWJlLnRuggp5b3V0dWJlLnR2ggp5b3V0dWJlLnVh ggp5b3V0dWJlLnVnggp5b3V0dWJlLnV5ggp5b3V0dWJlLnZugg95b3V0dWJlZ28u Y28uaWSCD3lvdXR1YmVnby5jby5pboINeW91dHViZWdvLmNvbYIQeW91dHViZWdv LmNvbS5icoIMeW91dHViZWdvLmlkggx5b3V0dWJlZ28uaW4waAYIKwYBBQUHAQEE XDBaMCsGCCsGAQUFBzAChh9odHRwOi8vcGtpLmdvb2dsZS5jb20vR0lBRzIuY3J0 MCsGCCsGAQUFBzABhh9odHRwOi8vY2xpZW50czEuZ29vZ2xlLmNvbS9vY3NwMB0G A1UdDgQWBBQKAZhTLILKJykrFIt9cD+hv00kmTAMBgNVHRMBAf8EAjAAMB8GA1Ud IwQYMBaAFErdBhYbvPZotXb1gba7Yhq6WoEvMCEGA1UdIAQaMBgwDAYKKwYBBAHW eQIFATAIBgZngQwBAgIwMAYDVR0fBCkwJzAloCOgIYYfaHR0cDovL3BraS5nb29n bGUuY29tL0dJQUcyLmNybDANBgkqhkiG9w0BAQsFAAOCAQEAEffPcv4/DyKUJy4k oslQw7f3KbqgoIzwahnjrRqXIucGurjmWpCKSoXJT/0nmNswe2iTQmqeBwF11l2U tnXnz1KElKW3PPKEnofIfziUS5cb1wf/dR45FHq93xwQ1wQOFi33U9X1FlGvIAEc vEY4ZMiVhBMMs5/7dNSmG86+8JEIvYAi4ZEAhOqr3CA2NpDiqEoLdrqlAp/v+EhZ yzlw9DDSvUInIzalxjRhZHFA91eX2lQVj4Qm3j90TYhhK37+KsytWpOFBLwp3rJc VcbRbexxvfi8b0MmLxRNzwIElCW8A3SfXKPAkyZLsma/Da5vknKhHR/sWg5DmJJw rKLIpQ==
END CERTIFICATE-----
Second part (of two) --
BEGIN CERTIFICATE-----
MIIEKDCCAxCgAwIBAgIQAQAhJYiw+lmnd+8Fe2Yn3zANBgkqhkiG9w0BAQsFADBC MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEbMBkGA1UEAxMS R2VvVHJ1c3QgR2xvYmFsIENBMB4XDTE3MDUyMjExMzIzN1oXDTE4MTIzMTIzNTk1 OVowSTELMAkGA1UEBhMCVVMxEzARBgNVBAoTCkdvb2dsZSBJbmMxJTAjBgNVBAMT HEdvb2dsZSBJbnRlcm5ldCBBdXRob3JpdHkgRzIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCcKgR3XNhQkToGo4Lg2FBIvIk/8RlwGohGfuCPxfGJziHu Wv5hDbcyRImgdAtTT1WkzoJile7rWV/G4QWAEsRelD+8W0g49FP3JOb7kekVxM/0 Uw30SvyfVN59vqBrb4fA0FAfKDADQNoIc1Fsf/86PKc3Bo69SxEE630k3ub5/DFx +5TVYPMuSq9C0svqxGoassxT3RVLix/IGWEfzZ2oPmMrhDVpZYTIGcVGIvhTlb7j gEoQxirsupcgEcc5mRAEoPBhepUljE5SdeK27QjKFPzOImqzTs9GA5eXA37Asd57 r0Uzz7o+cbfe9CUlwg01iZ2d+w4ReYkeN8WvjnJpAgMBAAGjggERMIIBDTAfBgNV HSMEGDAWgBTAephojYn7qwVkDBF9qn1luMrMTjAdBgNVHQ4EFgQUSt0GFhu89mi1 dvWBtrtiGrpagS8wDgYDVR0PAQH/BAQDAgEGMC4GCCsGAQUFBwEBBCIwIDAeBggr BgEFBQcwAYYSaHR0cDovL2cuc3ltY2QuY29tMBIGA1UdEwEB/wQIMAYBAf8CAQAw NQYDVR0fBC4wLDAqoCigJoYkaHR0cDovL2cuc3ltY2IuY29tL2NybHMvZ3RnbG9i YWwuY3JsMCEGA1UdIAQaMBgwDAYKKwYBBAHWeQIFATAIBgZngQwBAgIwHQYDVR0l BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMA0GCSqGSIb3DQEBCwUAA4IBAQDKSeWs 12Rkd1u+cfrP9B4jx5ppY1Rf60zWGSgjZGaOHMeHgGRfBIsmr5jfCnC8vBk97nsz qX+99AXUcLsFJnnqmseYuQcZZTTMPOk/xQH6bwx+23pwXEz+LQDwyr4tjrSogPsB E4jLnD/lu3fKOmc2887VJwJyQ6C9bgLxRwVxPgFZ6RGeGvOED4Cmong1L7bHon8X fOGLVq7uZ4hRJzBgpWJSwzfVO+qFKgE4h6LPcK2kesnE58rF2rwjMvL+GMJ74N87 L9TQEOaWTPtEtyFkDbkAlDASJodYmDkFOA/MgkgMCkdm7r+0X8T/cKjhf4t5K7hl MqO5tzHpCvX2HzLc
END CERTIFICATE-----
BEGIN CERTIFICATE-----
MIIDfTCCAuagAwIBAgIDErvmMA0GCSqGSIb3DQEBBQUAME4xCzAJBgNVBAYTAlVT MRAwDgYDVQQKEwdFcXVpZmF4MS0wKwYDVQQLEyRFcXVpZmF4IFNlY3VyZSBDZXJ0 aWZpY2F0ZSBBdXRob3JpdHkwHhcNMDIwNTIxMDQwMDAwWhcNMTgwODIxMDQwMDAw WjBCMQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEbMBkGA1UE AxMSR2VvVHJ1c3QgR2xvYmFsIENBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEA2swYYzD99BcjGlZ+W988bDjkcbd4kdS8odhM+KhDtgPpTSEHCIjaWC9m OSm9BXiLnTjoBbdqfnGk5sRgprDvgOSJKA+eJdbtg/OtppHHmMlCGDUUna2YRpIu T8rxh0PBFpVXLVDviS2Aelet8u5fa9IAjbkU+BQVNdnARqN7csiRv8lVK83Qlz6c JmTM386DGXHKTubU1XupGc1V3sjs0l44U+VcT4wt/lAjNvxm5suOpDkZALeVAjmR Cw7+OC7RHQWa9k0+bw8HHa8sHo9gOeL6NlMTOdReJivbPagUvTLrGAMoUgRx5asz PeE4uwc2hGKceeoWMPRfwCvocWvk+QIDAQABo4HwMIHtMB8GA1UdIwQYMBaAFEjm aPkr0rKV10fYIyAQTzOYkJ/UMB0GA1UdDgQWBBTAephojYn7qwVkDBF9qn1luMrM TjAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIBBjA6BgNVHR8EMzAxMC+g LaArhilodHRwOi8vY3JsLmdlb3RydXN0LmNvbS9jcmxzL3NlY3VyZWNhLmNybDBO BgNVHSAERzBFMEMGBFUdIAAwOzA5BggrBgEFBQcCARYtaHR0cHM6Ly93d3cuZ2Vv dHJ1c3QuY29tL3Jlc291cmNlcy9yZXBvc2l0b3J5MA0GCSqGSIb3DQEBBQUAA4GB AHbhEm5OSxYShjAGsoEIz/AIx8dxfmbuwu3UOx//8PDITtZDOLC5MH0Y0FWDomrL NhGc6Ehmo21/uBPUR/6LWlxz/K7ZGzIZOKuXNBSqltLroxwUCEm2u+WR74M26x1W b8ravHNjkOR/ez4iyz0H7V84dJzjA1BOoa+Y7mHyhD8S
END CERTIFICATE-----
Chosen Solution
I have just seen the discussion at https://support.mozilla.org/en-US/questions/1200716 and I see that this seems to be a (hopefully temporary) problem with the Google OCSP server.
I'll set 'security.OCSP.require' to 'false' for the next couple of days. Hopefully Google will fix this soon.