We're calling on all EU-based Mozillians with iOS or iPadOS devices to help us monitor Apple’s new browser choice screens. Join the effort to hold Big Tech to account!

Avatar for Username

搜索 | 用户支持

防范以用户支持为名的诈骗。我们绝对不会要求您拨打电话或发送短信，及提供任何个人信息。请使用“举报滥用”选项报告涉及违规的行为。

详细了解

话题已存档。 如果需要帮助请提出新问题。

Error after Windows 10 Update: The certificate is not trusted because the issuer certificate is unknown.

  • 3 个回答
  • 3 人有此问题
  • 1 次查看
  • 最后回复者为 BryanSullo

BryanSullo
BryanSullo
more options

I came into work this morning to find my Windows 10 computer had restarted due to some updates. I also found that my network adapter wasn't working properly. I managed to get on the network, but I'm having trouble with Firefox. Specifically, one site is giving me trouble: https://store.ancientfaith.com/ This site works fine on other computers running Firefox. Other secure sites work fine on the affected computer (so far). What I get is a message that states:

Your connection is not secure The owner of store.ancientfaith.com has configured their website improperly. To protect your information from being stolen, Firefox has not connected to this website.

When I look at Advanced, I see: store.ancientfaith.com uses an invalid security certificate. The certificate is not trusted because the issuer certificate is unknown. The server might not be sending the appropriate intermediate certificates. An additional root certificate may need to be imported. (Error code: sec_error_unknown_issuer)

When I view the certificate, the only item in the certificate hierarchy is the site's cert. When I view it from another computer, or in another browser on the same computer, the hierarchy appears. Otherwise, the certificate information is identical across all computers and browsers.

I've deleted the cert8.db file, and I've done a Firefox refresh. Can anyone suggest a next step?

I came into work this morning to find my Windows 10 computer had restarted due to some updates. I also found that my network adapter wasn't working properly. I managed to get on the network, but I'm having trouble with Firefox. Specifically, one site is giving me trouble: https://store.ancientfaith.com/ This site works fine on other computers running Firefox. Other secure sites work fine on the affected computer (so far). What I get is a message that states: Your connection is not secure The owner of store.ancientfaith.com has configured their website improperly. To protect your information from being stolen, Firefox has not connected to this website. When I look at Advanced, I see: store.ancientfaith.com uses an invalid security certificate. The certificate is not trusted because the issuer certificate is unknown. The server might not be sending the appropriate intermediate certificates. An additional root certificate may need to be imported. (Error code: sec_error_unknown_issuer) When I view the certificate, the only item in the certificate hierarchy is the site's cert. When I view it from another computer, or in another browser on the same computer, the hierarchy appears. Otherwise, the certificate information is identical across all computers and browsers. I've deleted the cert8.db file, and I've done a Firefox refresh. Can anyone suggest a next step?

被采纳的解决方案

cor-el said

You can copy the cert8.db file from a working computer to a not working profile or possibly export the involved intermediate certificate and import this certificate.
  • Tools > Options > Advanced > Certificates: View Certificates
You can use this button to go to the current Firefox profile folder:

This worked. Thank you.

I also alerted the Web site owner to the problem. Thank you both.

定位到答案原位置 👍 0

所有回复 (3)

philipp
philipp
  • Moderator
more options

hi, that is indeed an error with the certificate chain that isn't properly implemented by this website: https://www.ssllabs.com/ssltest/analyze.html?d=store.ancientfaith.com

you should get in contact with them and report this issue, as at the moment it will depend on chance if it works when you visit the site with firefox (or to be more clear, it depends on if a particular firefox installation has come across another site before, that has properly implemented the "RapidSSL CA " intermediate cert, as this would get stored in the cert8.db file)...

cor-el
cor-el
  • Moderator
  • Top 10 Contributor
more options

You can copy the cert8.db file from a working computer to a not working profile or possibly export the involved intermediate certificate and import this certificate.

  • Tools > Options > Advanced > Certificates: View Certificates

You can use this button to go to the current Firefox profile folder:

BryanSullo
BryanSullo 提问者
more options

选择的解决方案

cor-el said

You can copy the cert8.db file from a working computer to a not working profile or possibly export the involved intermediate certificate and import this certificate.
  • Tools > Options > Advanced > Certificates: View Certificates
You can use this button to go to the current Firefox profile folder:

This worked. Thank you.

I also alerted the Web site owner to the problem. Thank you both.