Where did you install Firefox from? Help Mozilla uncover 3rd party websites that offer problematic Firefox installation by taking part in our campaign. There will be swag, and you'll be featured in our blog if you manage to report at least 10 valid reports!

Avatar for Username

搜尋 Mozilla 技術支援網站

防止技術支援詐騙。我們絕對不會要求您撥打電話或發送簡訊，或是提供個人資訊。請用「回報濫用」功能回報可疑的行為。

Learn More

此討論串已被封存。 如果您有需要幫助，請新增一個新問題

DigiNotar Root CA listed in about:certificate

  • 1 回覆
  • 3 有這個問題
  • 1 次檢視
  • 最近回覆由 cor-el

terriblenihilist
terriblenihilist
more options

I opened about:certificate to make sure my local O/S certs were in order and noticed the Servers tab and after opening it saw that DigiNotar Root CA was the one and only entry. I know all about the DigiNotar fiasco and how their root cert was left enabled after the NL government took over in order to prevent a bunch more problems. However, I don't understand why that cert is listed in my Servers tab and why it isn't anywhere in my Settings -> Certificates options window. I have used a couple self-signed certs in the past for localhost web server stuff where I got tired of the SSL warning over HTTP on my local domain, but otherwise only have my PGP key and haven't messed with anything otherwise. Should I be worried? This thing happened several years ago and the Root Cert I have is listed as expiring in about a year and a half.

Running Windows 11 Pro and Firefox 114.0.1 (64-bit)

I opened about:certificate to make sure my local O/S certs were in order and noticed the Servers tab and after opening it saw that DigiNotar Root CA was the one and only entry. I know all about the DigiNotar fiasco and how their root cert was left enabled after the NL government took over in order to prevent a bunch more problems. However, I don't understand why that cert is listed in my Servers tab and why it isn't anywhere in my Settings -> Certificates options window. I have used a couple self-signed certs in the past for localhost web server stuff where I got tired of the SSL warning over HTTP on my local domain, but otherwise only have my PGP key and haven't messed with anything otherwise. Should I be worried? This thing happened several years ago and the Root Cert I have is listed as expiring in about a year and a half. Running Windows 11 Pro and Firefox 114.0.1 (64-bit)
附加的畫面擷圖

被選擇的解決方法

This is not about the real DigiNotar certificate, but about a fake certificate that is used to make it impossible to override the blocking.

從原來的回覆中察看解決方案 👍 2

所有回覆 (1)

cor-el
cor-el
  • Moderator
  • Top 10 Contributor
more options

選擇的解決方法

This is not about the real DigiNotar certificate, but about a fake certificate that is used to make it impossible to override the blocking.