What's the exact error?

parashinta.fi uses an invalid security certificate. The certificate is not trusted because the issuer certificate is unknown. The server might not be sending the appropriate intermediate certificates. An additional root certificate may need to be imported. Error code: SEC_ERROR_UNKNOWN_ISSUER

What's needed is the issuer of the problematic cert. You can install this extension to determine the issuer information. https://addons.mozilla.org/en-US/firefox/addon/certainly-something/

Please post that information here.

christ1 said

What's needed is the issuer of the problematic cert. You can install this extension to determine the issuer information. https://addons.mozilla.org/en-US/firefox/addon/certainly-something/ Please post that information here.

Do you mean it?

Country: US Organization: DigiCert Inc Organizational Unit :www.digicert.com Common Name : Thawte TLS RSA CA G1

Sort of, this looks like incomplete information though.

You can check the site yourself at https://www.ssllabs.com . When testing the parashinta.fi domain it says: This server's certificate chain is incomplete. Grade capped to B.

That means in intermediate cert is not sent by the server, and hence Firefox complains about it with the SEC_ERROR_UNKNOWN_ISSUER error.

'DigiCert Global Root G2' is the root CA, and is already trusted by Firefox. The 'Thawte TLS RSA CA G1' is an intermediate CA, and the server does not send that intermediate cert. It only sends it's own cert for 'parashinta.fi'.

You should contact the site owner so that they can fix their configuration.

christ1 said

Sort of, this looks like incomplete information though. You can check the site yourself at https://www.ssllabs.com . When testing the parashinta.fi domain it says: This server's certificate chain is incomplete. Grade capped to B. That means in intermediate cert is not sent by the server, and hence Firefox complains about it with the SEC_ERROR_UNKNOWN_ISSUER error. 'DigiCert Global Root G2' is the root CA, and is already trusted by Firefox. The 'Thawte TLS RSA CA G1' is an intermediate CA, and the server does not send that intermediate cert. It only sends it's own cert for 'parashinta.fi'. You should contact the site owner so that they can fix their configuration.

I do not showed you the all information from the Certificate Viewer. I was tested the site parashinta.fi on different ssl testers(not on https://www.ssllabs.com - they are not for free). They show reslut, and the result are success. Cert is valid. Only Firefox mobile give me the error of ssl cert. I am is a developer on this site. And i must solved this problem for my customer. Thx for your try to help me.

Did you install the intermediate certs from DigiCert as suggested? https://www.digicert.com/ssl-certificate-installation.htm

This is not a mobile Firefox issue. It is an issue that any Firefox user who has not seen the DigiCert intermediate can encounter.

kbrosnan said

Did you install the intermediate certs from DigiCert as suggested? https://www.digicert.com/ssl-certificate-installation.htm This is not a mobile Firefox issue. It is an issue that any Firefox user who has not seen the DigiCert intermediate can encounter.

Thank. I tested the certificate on the Digicert website and added the required settings.

Please close the issue.