"This Connection is Untrusted" error message appears - What to do | Firef...

https://support.mozilla.org/en-US/kb/connection-untrusted-error-message

Tap here to go to the mobile version of the site. Ask a question Sign In / Register English

Products & Services Hot Topics Mozilla News Help Other Users Suggestion Box

Firefox
Editing Tools Article Discussion Edit Article Translate Article Show Translations Show History Related Articles Troubleshoot the "Secure Connection Failed" error message Fix "The bookmarks and history system will not be functional" error message I've lost my Firefox Sync account information - What to do Learn the Basics: get started Download, install and migration Privacy and security settings Customize controls, options and add-ons Fix slowness, crashing, error messages and other problems Controls, options, settings, preferences Download and install apps Tips and tricks Bookmarks Cookies

"This Connection is Untrusted" error message appears - What to do

This article describes why the This Connection Is Untrusted error message may appear when trying to visit secure (https) websites in Firefox. For troubleshooting secure connection problems with the error message Secure Connection Failed, see the Troubleshoot the "Secure Connection Failed" error message article. For troubleshooting other error messages, see Websites don't load - troubleshoot and fix error messages.

Certificates and identification

Print to PDF without this message by purchasing novaPDF (http://www.novapdf.com/) 1 of 4

4/1/2013 10:20 PM

"This Connection is Untrusted" error message appears - What to do | Firef...

https://support.mozilla.org/en-US/kb/connection-untrusted-error-message

When you visit a website whose web address starts with https, your communication with the site is encrypted to help ensure your privacy. Before starting the encrypted communication, the website will present Firefox with a "certificate" to identify itself. The certificate helps Firefox determine whether the site you're visiting is actually the site that it claims to be. If there is a problem with the certificate, you will see the This Connection Is Untrusted alert page.

Seeing the alert does not necessarily mean that the website you're visiting is trying to trick you into believing it is a different website - it means that Firefox isn't able to verify the identity of the website, and that you should proceed carefully. There are several problems that can cause Firefox to reject a certificate. Some of them are described in detail in the Technical information section below.

Get out of there!

The safest thing to do is to click Get me out of here! , or to go to a different website. Unless you know and understand the technical reason why the website presented incorrect identification, and are willing to risk communicating over a connection that could be vulnerable to an eavesdropper, you should not proceed to the website. If possible, you should contact the owners of the website and inform them of the error.

Technical information
Click on Technical Details for more information on why the website's identity information is invalid. Some common errors are described below.

Certificate will not be valid until (date)

(site name) uses an invalid security certificate. The certificate will not be valid until (date). (Error code:

Print to PDF without this message by purchasing novaPDF (http://www.novapdf.com/) 2 of 4

4/1/2013 10:20 PM

"This Connection is Untrusted" error message appears - What to do | Firef...

https://support.mozilla.org/en-US/kb/connection-untrusted-error-message

sec_error_expired_issuer_certificate) This error can occur if your computer clock has the wrong date, in which case the date given in the error message will be in the past. To fix the problem, set your system clock to today's date and time (double-click the clock icon on the Windows Taskbar).

The certificate expired on (date)

(site name) uses an invalid security certificate. The certificate expired on (date). (Error code: sec_error_expired_certificate) This error occurs when a website's identity certification has expired. This error can also occur if your computer clock has the wrong date. To fix the problem, set your system clock to today's date and time (double-click the clock icon on the Windows Taskbar).

Certificate is only valid for (site name)

(site name) uses an invalid security certificate. The certificate is only valid for (site name). (Error code: ssl_error_bad_cert_domain) This error is telling you that the identification sent to you by the site is actually for another site. While anything you send would be safe from eavesdroppers, the recipient may not be who you think it is. A common situation is when the certificate is actually for a different part of the same site. For example, you may have visited https://example.com, but the certificate is for https://www.example.com. In this case, if you access https://www.example.com directly, you should not receive the warning.

The certificate is not trusted because the issuer certificate is unknown

(site name) uses an invalid security certificate. The certificate is not trusted because the issuer certificate is unknown. (Error code: sec_error_unknown_issuer) The file cert8.db in your profile folder may have become corrupted. Delete this file while Firefox is closed. 1. Open your profile folder: At the top of the Firefox window, click on the Firefox button, go over to the Help menu and select Troubleshooting Information . The Troubleshooting Information tab will open. 2. Under the Application Basics section, click on Show Folder . A window with your profile files will open. Note: If you are unable to open or use Firefox, follow the instructions in Finding your profile without opening Firefox. 3. At the top of the Firefox window, click on the Firefox button and then select Exit 4. Click on the file named cert8.db. 5. Press Delete . 6. Restart Firefox. cert8.db will be recreated when you restart Firefox. This is normal.

The certificate is not trusted because no issuer chain was provided

Print to PDF without this message by purchasing novaPDF (http://www.novapdf.com/) 3 of 4

4/1/2013 10:20 PM

"This Connection is Untrusted" error message appears - What to do | Firef...

https://support.mozilla.org/en-US/kb/connection-untrusted-error-message

(site name) uses an invalid security certificate. The certificate is not trusted because no issuer chain was provided. (Error code: sec_error_unknown_issuer) You may have enabled SSL scanning in your security software such as ESET or BitDefender. Try to disable this option.

The certificate is not trusted because it is self-signed

(site name) uses an invalid security certificate. The certificate is not trusted because it is self-signed. (Error code: sec_error_untrusted_issuer) Self-signed certificates make your data safe from eavesdroppers, but say nothing about who the recipient of the data is. This is common for intranet websites that aren't available publicly.

Bypassing the warning

You should only bypass the warning if you're confident in both the identity of the website and the integrity of your connection - even if you trust the site, someone could be tampering with your connection. Legitimate public sites will not ask you to add connection rule exceptions - an invalid certificate can be an indication of a web page that will defraud you or steal your identity. 1. On the warning page, click I Understand the Risks. 2. Click Add Exception... . The Add Security Exception dialog will appear. 3. Read the text describing the problems with this site. 4. Click Confirm Security Exception if you want to trust the site. Share this article: You can use the link http://mzl.la/MejhsC to easily share this article with others. It will display instructions automatically customized for their operating system and language. Contributors to this page: AliceWyman, Bo102010, Tonnes, Verdi, scoobidiver, Swarnava, Tylerdowner

Portions of this content are 19982013 by individual mozilla.org contributors. Content available under a Creative Commons license. Contact Us Privacy Policy Legal Notices Report Trademark Abuse Source Code Twitter Facebook Firefox Affiliates Switch to mobile site

Print to PDF without this message by purchasing novaPDF (http://www.novapdf.com/) 4 of 4

4/1/2013 10:20 PM