There is security software like Avast and Kaspersky and BitDefender and ESET that intercept secure connections and send their own certificate.

This can only work properly if you have the root certificate installed in the Firefox Certificate Manager. You will have to disable this SSL scanning feature to make Firefox work properly and allow you to inspect the certificate send by the website yourself. Mozilla usually acts very quickly if security vulnerabilities are discovered, but other companies can take a lot more time and leave you vulnerable.

See also:

• https://insights.sei.cmu.edu/cert/2015/03/the-risks-of-ssl-inspection.html

You can open the "Add Security Exception" window by pasting this chrome URL in the Firefox location/address bar and inspect the certificate:

• chrome://pippki/content/exceptionDialog.xul

In the location field of this window type or paste the URL of the website.

• retrieve the certificate via the "Get certificate" button
• click the "View..." button to inspect the certificate in the Certificate Viewer

You can inspect details like the issuer and the certificate chain in the Details tab of the Certificate Viewer. Check who is the issuer of the certificate.

Hi

This seems to work thanks but why isn't bitdefender trusted? it says the certificate is not valid how can this be?

Kind regards

seems like there is more going on now I cant even visit any https page anymore I tried outlook.com --> same as above msn.com --> same

any non https site works https sites has same issue as above

do I really need to add those certificates for every https site?

You do not add a certificate for each site and you should never make a permanent exception in cases like this. You would have to contact Bitdefender or their their FAQ to find out how to add the Bitdefender root certificate to Firefox. Firefox uses its own certificate storage and doesn't use the Windows certificate storage like IE and Google Chrome do.

You can inspect the certificate chain like I posted above to see what root certificate you would have to install. If you have other browser that work then you can check the certificate chain there and export the Bitdefender root certificate. Then you can import this certificate in the Firefox Certificate Manager. You need at least to set the trust bit to identify websites when prompted.

• "Trust this CA to identify websites"

what I mean is that every https page I visit now with firefox gives me this error

Deze verbinding is niet beveiligd

U hebt Firefox gevraagd een beveiligde verbinding te maken met www.google.nl, maar we kunnen niet bevestigen dat uw verbinding is beveiligd.

Normaal gesproken zullen websites vertrouwde identificatie tonen wanneer u een beveiligde verbinding wilt maken, om te bewijzen dat u naar de juiste plek gaat. De identiteit van deze website kan echter niet worden bevestigd. Wat moet ik doen?

Als u doorgaans zonder problemen verbinding maakt met deze website, kan deze fout betekenen dat iemand de website probeert na te bootsen en kunt u beter niet verdergaan.

Deze website maakt gebruik van HTTP Strict Transport Security (HSTS) om aan te geven dat Firefox alleen een beveiligde verbinding mag maken. Hierdoor is het niet mogelijk om een uitzondering voor dit certificaat toe te voegen.

www.google.nl gebruikt een ongeldig beveiligingscertificaat.

Het certificaat wordt niet vertrouwd, omdat het uitgeverscertificaat onbekend is. De server stuurt mogelijk niet de juiste tussencertificaten. Mogelijk dient een extra basiscertificaat te worden geïmporteerd.

(Foutcode: sec_error_unknown_issuer)

so for every page that has https written in the url I have to add the certificate ? that's bogus I never had this

please help me

Did you check the issuer of the certificate like I wrote in my first reply?

What security software do you have?

It is possible that your security software is intercepting secure connections and sends its own certificate to Firefox and Firefox doesn't trust this certificate. If that isn't the case then you may have other software installed that behaves the same and sends its own certificate.

sorry for late reply

the CA is Bitdefender self and firefox does not trust it so I think the problem is found heheh

Thanks for help

Kind regards