Error code: sec_error_unknown_issuer Solution Valid SSL Certificate Throwing Error in Firefox

So you've just purchased your SSL cert, renewed it and installed it or maybe you've had it installed and working fine all the time with all other browsers but you've upgraded to a recent version of Firefox and suddenly get the warning "Error code: sec_error_unknown_issuer" error.

This is terrible since if you bought an SSL cert, you are most likely using it for trust purposes for your business and obviously that message will scare away most potential customers.

The Easy Solution

You need the CA Certificate Bundle which even threw me off because  I've always just used the .crt/certificate file issued for the domain and the .key/private key file and things have always worked.

Find the CA Chain file that is also provided by your SSL provider and add it to your configuration.  In Apache this means adding a line like this to your Apache Vhost/Control Panel

SSLCACertificateFile /etc/ssl-certs/RapidSSL_CA_bundle.pem

After that just restart Apache and the error will be gone.

This issue is also discussed on:

Comodo's website

RapidSSL's website


Tags:

sec_error_unknown_issuer, valid, ssl, certificate, firefoxso, ve, purchased, cert, renewed, installed, browsers, upgraded, firefox, quot, purposes, ca, bundle, crt, issued, domain, provided, provider, configuration, apache, adding, vhost, panel, sslcacertificatefile, etc, certs, rapidssl_ca_bundle, pem, restart, comodo, website, rapidssl,

Latest Articles

  • CentOS 8 how to restart the network!
  • CentOS 8 how to convert to a bootable mdadm RAID software array
  • ADATA USB Thumb Drive Issues
  • KMODE EXCEPTION NOT HANDLED - QEMU/KVM Won't Boot Windows 2016 or 10 Image or Physical Machine
  • Linux Mint / Ubuntu / Debian Mate Disable Guest Session and Hide Usernames on Lightdm Login screen GUI
  • SSH How To Create Public/Private Key Pair and with a Larger Keysize than 2048 bits
  • selenium.common.exceptions.WebDriverException: Message: Can not connect to the Service geckodriver
  • python ModuleNotFoundError: No module named 'bs4' even though you have the module
  • ssh how to connect using a SOCKS 5 proxy with nc and proxycommand
  • Enable AMDGPU Linux Driver
  • apache symlinks denied even with followsymlinks
  • chown how to change ownership on a symlink
  • how to use ifplugd in Linux to execute a command or script when a NIC cable is unplugged or plugged in
  • dd how to backup and restore disk images including compression with gzip
  • mpv / mplayer with Radeon / AMD GPU Video Card Driver enable VDPAU GPU Accelerated Video Decoding
  • Wordpress Reset Blog User Password from MySQL Using Linux Bash and not PHPMyadmin
  • Ubuntu Linux Mint Debian xorg performance and tear-free tuning for AMD Radeon Based Cards
  • Centos 7 Stopped and Disabled Firewalld and ports still blocked
  • MariaDB / MySQL Reset Root Forgotten Password on Centos 7
  • Centos 7 How to install Mysql/Mariadb