1353778 - SUMO lithium Certificate Hierarchy Broken

Status: RESOLVED DUPLICATE of bug 1353467

(support.mozilla.org - Lithium :: General, defect)

Description

[Dennis Boldt]

Attachment: ff.png

User Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36

Steps to reproduce:

(1) Creating an empty profile in FF51.0.1, 64 Bit, Ubuntu.
(2) Opening: https://support.mozilla.org/



Actual results:

It shows:

Error code: SEC_ERROR_UNKNOWN_ISSUER

Looking into the details of the cert, it can be seen that the hierarchy is broken. It just shows (see attached file):

secure03.lithium.com


Expected results:

FF should accept the certificate and it should show the whole hierarchy in details (taken from Chrome):

DigiCert High Assurance EV Root CA
|- DigiCert SHA2 Assurance Server CA
  |- secure03.lithium.com

Comment 1

[Dennis Boldt]

Attachment: chrome.png

The Hierarchy in Chrome.

Comment 2

[Dennis Boldt]

Attachment: DigiCert High Assurance EV Root CA

The Root Cert "DigiCert High Assurance EV Root CA" is shipped with FF.

Comment 3

[Dennis Boldt]

Attachment: DigiCert High Assurance EV Root CA in Chrome

"DigiCert High Assurance EV Root CA" in Chrome is the same.

Comment 4

[Roland Tanglao needinfo please :rolandtanglao, :mohnkuchen, :adobo, :sinigang, :roland]

This was reported to Lithium (Mozilla can't fix it; root cause seems to be Lithium switching CDNs)
in case 00138510 aka https://supportcases.lithium.com/5006100000AcTwW