Where did you install Firefox from? Help Mozilla uncover 3rd party websites that offer problematic Firefox installation by taking part in our campaign. There will be swag, and you'll be featured in our blog if you manage to report at least 10 valid reports!

Avatar for Username

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

This thread was archived. Please ask a new question if you need help.

Firefox doesn't recognize a certificate by Sectigo Ltd on certain Linux machines

  • 1 reply
  • 1 has this problem
  • 2 views
  • Last reply by info1972

info1972
info1972
more options

I try to open https://botcompany.de in Firefox 74.

On one Linux machine (Peppermint 10), it works fine.

On another Linux machine (Ubuntu 18.04), I get a certificate error (SEC_ERROR_UNKNOWN_ISSUER).

Where does this difference come from? I need my certificate to be recognized on all machines.

Thanks

I try to open https://botcompany.de in Firefox 74. On one Linux machine (Peppermint 10), it works fine. On another Linux machine (Ubuntu 18.04), I get a certificate error (SEC_ERROR_UNKNOWN_ISSUER). Where does this difference come from? I need my certificate to be recognized on all machines. Thanks

Chosen solution

Hey guys, problem SOLVED.

I needed to put the full chain instead of just the certificate in my keystore (webserver is written in Java). Posting the crucial code here to help others:

cat privkey.pem fullchain.pem >priv-and-cert.pem openssl pkcs12 -export -out keystore.p12 -in priv-and-cert.pem -name mydomain.name

Read this answer in context 👍 0

All Replies (1)

info1972
info1972 Question owner
more options

Chosen Solution

Hey guys, problem SOLVED.

I needed to put the full chain instead of just the certificate in my keystore (webserver is written in Java). Posting the crucial code here to help others:

cat privkey.pem fullchain.pem >priv-and-cert.pem openssl pkcs12 -export -out keystore.p12 -in priv-and-cert.pem -name mydomain.name