My PC uses Windows 7 Ultimate SP1. I definitely do not want to update to a newer version of Windows. Thus, I cannot update my Firefox.

Please let me know what root or roots are affected and how to download replacement(s).

My PC uses Windows 7 Ultimate SP1. I definitely do not want to update to a newer version of Windows. Thus, I cannot update my Firefox.

You can update to a current version as the OP says Firefox 115.13+ ESR. It is currently at Fx 115.16.1esr.

The Firefox 115 ESR is still being updated to support the older OS's Windows 7, 8, 8.1 and macOS 10.12, 10.13, 10.14 in mind. The updates will occur until Fx 115.21.0esr in March 2025 unless Mozilla extends update support again.

https://support.mozilla.org/en-US/kb/firefox-users-windows-7-8-and-81-moving-extended-support

With Windows 7 you can use Firefox 115 ESR (current: 115.16.0 and isn't affected) and you should be fine with this version since you can't update to a newer version. You keep getting updates up to March 25, then your OS will no longer be supported and you need to stuck with the last version.

• https://whattrainisitnow.com/release/?version=esr

Firefox 116 and newer require Windows 10 as the minimum, users on Windows 7 and 8 and 8.1 have been moved to Firefox 115 ESR.

• https://support.mozilla.org/en-US/kb/firefox-users-windows-7-8-and-81-moving-extended-support
• https://download-installer.cdn.mozilla.net/pub/firefox/releases/128.3.0esr/

That does NOT answer my questions. (1) What are the affected roots? (2) What URIs can I use to download the replacements roots?

NOTE WELL: My wife's PC is still using Windows XP SP3. It does not have the capacity to update even to Windows 7. However, it still meets my wife's needs. She does not want any version of Firefox. I will have to update her SeaMonkey for new root certificates. Yes, I know how, but I need to know what roots.

I do not know the internals at this time, there is only this support article.

• https://support.mozilla.org/en-US/kb/root-certificate-expiration
• https://support.mozilla.org/en-US/forums/contributors/717137

Hi

I have looked into this with Mozilla staff, who have confirmed that it is not possible to download replacement root certificates. They are baked into the code.

Windows 7 Firefox 115.0.3 (new as of 23 Jan 2023 and -- without my authorization -- pushed onto my PC on 12 Apr 2024)

In Firefox, I go to [Settings > Privacy & Security > Certificates > View Certificates]. That gives me the Certificate Manager window. When Authorities is selected on that window's menu bar, there is an Import button at the bottom (among others) to import a root certificate.

In the meantime, your Web page at https://ccadb.my.salesforce-sites.com.../IncludedCACertificateReport -- last updated today -- indicates the only root expiring in 2025 is one DigiCert root. Using the Certificate Manager window' View button to examine all DigiCert roots, I did not find any expiring in 2025. However, I found several that expired in 2023, on which I used the window's Delete or Distrust button.

Again, which root in Firefox's root store is the subject of your alert? And what root will be replacing it? How is it that a version of Firefox released this year included root certificates that expired last year?

The roots in question are part of Mozilla's system for verifying add-ons and delivering other remote content to Firefox. They are not part of the public web PKI, aren't included in the CCADB, and aren't accessible via the certificate manager. They are compiled into Firefox and can only be updated by updating Firefox. Short of manually backporting the patch to your outdated copy of Firefox and recompiling it, the only way to ensure Firefox will keep working is to update it.

Can't Mozilla consider to provide an update for 78.15.0 as that is the latest version that runs on Mac OS X 10.9/10.10/10.11 and they have hardware that doesn't support newer macOS versions? Mac OS X 10.12/10.13/10.14 use 115 ESR and thus aren't affected.

Can't Mozilla consider to provide an update for 78.15.0 as that is the latest version that runs on Mac OS X 10.9/10.10/10.11 and they have hardware that doesn't support newer macOS versions? Mac OS X 10.12/10.13/10.14 use 115 ESR and thus aren't affected.

I reached out to our engineering team. It was something they looked at and considered but unfortunately, it seems that making this happen would be quite challenging at this point. Since it's been out of support for over three years, we no longer have the infrastructure in place to build ESR78.

我的电脑无法从Win7升级为更高级的版本。 我不太确定，贵司关于“停止使用”的含义。 如果是浏览器无法打开无法浏览网页，那么，这是无法容忍的。是一种极深刻的傲慢。是大公司对微小个人客户利益的无视。 如果是旧版浏览器在不升级的情况下，尚能使用，只是功能受到部分限制。那么，这仅仅尚可容忍。 作为旧电脑和旧版本系统的使用者，不得不忍受诸如此类的不便，不得收集各种旧版软件并使用。这是这个世界对无钱无权弱势者的深深恶意。然而，越是弱势者，越是更加需要与这个世界的连接。

I'm using 78.15.0esr on a Mac which cannot be updated beyond OS X 10.11 Wouldn't it be wonderful if the engineering team could rise to the challenge of keeping the browser working for users of old machines! Please…

Hello I don't believe there is hope for me (unless I buy a new laptop), but still I'm going to ask. Here is my troubleshooting configuration: Firefox browser 78.15.0esr (64 bits) MacBook Pro (Mid 2009), with OS X Yosemite version 10.10.5. Do you believe there is a way for me to keep using Firefox? If so, please which one is it? If no, no worries, no hard feeling.

I hope there is a change of heart about no longer offering an upgrade for OSX 10.10.* or 10.11.* users as there is a large number of us using Firefox, as there is no alternate browser still working on these machines it will see most hardware being sent to landfill, which is what Apple hoped for years ago . I don't care for any of the new whizbang hardware that big tech wants to juice as much info/data from users as possible. So please Mozilla help us " resistance" folk.

Firefox 79.0 to 115.0 ESR requires macOS 10.12 at minimum as Fx 116.0 and later requires macOS 10.15 at minimum.

macOS 10.12 is still the minimum macOS that Mozilla is supporting. It is the minimum for Firefox 115 ESR with updates till at least Fx 115.21.0esr in March 2025 unless Mozilla extends updates again.

Mozilla has no plans support the old EOL macOS 10.11 or earlier (as they would have continued) as Mozilla is still supporting macOS 10.12, 10.13, 10.14 when the other web browsers have dropped support. https://support.mozilla.org/en-US/kb/firefox-mac-osx-users-esr

It may not be as easy as with normal computer hardware but another option could be depending on CPU used is to run a current Linux distro in dual booting though I have never done that with a Mac hardware.

How exactly does this root certificate function? If you start the browser without an internet connection it doesn't break everything, so could you block whichever Mozilla service with your firewall to prevent the issue? What about changing system time back a few years? In 2019 the same thing happened and everybody's extensions broke, but you could still re-enable them by executing code in developer mode as shown in this reddit.com post here. Will this be any different? Couldn't you also just run extensions as unsigned? Regards.

I'm on Mac OS 10.11.6 using Firefox 78.15.oesr. I do not want to upgrade my OS because I would lose to the ability to use many important legacy applications, and be forced to "subscribe" to Adobe and others. If Firefox cannot continue to support 78.15, I may have to find another browser, which I do not want to do. Please!

Basilisk is getting a new user on March 14, 2025

I'm on Mac OS 10.10.2 using Firefox 78.15.oesr. I do not want to upgrade my OS and updates are not available for my Mac computer.

is there any hack available to keep addons active on firefox 56 (windows 7) and on firefox 90 (linux mint) after that silly certificate expired?

there is a good reason for sticking on old firefox 56 on windows 7, such as chatzilla and other addons which don't work anymore on firefox versions 57 and newer. the ability to download from ftp sources (later versions of firefox don't support ftp anymore) is another important reason i'm depending on firefox 56. and firefox 56 is old enough to be able to download pictures as .jpg and/or as .png instead of these silly webp or avif formats newer browsers force me to download.

and on linux i'm sticking with firefox 90 because firefox 90 is the last version allowing me to disable that ugly proton bullshit you had to shove down our throats. thus i'm also NOT going to downgrade firefox 90 on linux mint to anything newer. for a similar reason i'm sticking with thunderbird 102 forever to avoid that ugly supernova ui change coming with thunderbird 115.

so i need to be able to use my browsers INCLUDING all my installed addons. just DO NOT deactivate my installed addons! i don't mind if you disable the ability to update installed addons or remove the ability to install new addons but DO NOT deacivate my addons! DO NOT TOUCH already installed addons!