Thomas, Please fix the test websites... See https://crt.sh/test-websites which shows the "Wrong chain" error for both test websites. And https://tls-observatory.services.mozilla.com/static/ev-checker.html fails... TLS Server: https://test-root-2022-rsa.ssl.com EV Policy OID: 2.23.140.1.1 PEM for SSL.com TLS RSA Root CA 2022 exit status 1, Stderr: BuildCertChain failed: SEC_ERROR_UNKNOWN_ISSUER Peer's Certificate issuer is not recognized. TLS Server: https://test-root-2022-ecc.ssl.com EV Policy OID: 2.23.140.1.1 PEM for SSL.com TLS ECC Root CA 2022 exit status 1, Stderr: BuildCertChain failed: SEC_ERROR_UNKNOWN_ISSUER Peer's Certificate issuer is not recognized.
Bug 1799533 Comment 14 Edit History
Note: The actual edited comment in the bug view page will always show the original commenter’s name and original timestamp.
Thomas, Please fix the test websites... See https://crt.sh/test-websites which shows the "Wrong chain" error for both test websites. And https://tls-observatory.services.mozilla.com/static/ev-checker.html fails... TLS Server: https://test-root-2022-rsa.ssl.com EV Policy OID: 2.23.140.1.1 PEM for SSL.com TLS RSA Root CA 2022 exit status 1, Stderr: BuildCertChain failed: SEC_ERROR_UNKNOWN_ISSUER Peer's Certificate issuer is not recognized. TLS Server: https://test-root-2022-ecc.ssl.com EV Policy OID: 2.23.140.1.1 PEM for SSL.com TLS ECC Root CA 2022 exit status 1, Stderr: BuildCertChain failed: SEC_ERROR_UNKNOWN_ISSUER Peer's Certificate issuer is not recognized. The problem might simply be that the web server is not serving up the intermediate certificates when it serves up the TLS cert.