1565191 - https://ants.gouv.fr/ can't be reached after NSS upgrade to 3.45

Status: RESOLVED DUPLICATE of bug 1552374

(Core :: Security: PSM, defect)

Description

[Pascal Chevrel:pascalc (PTO until April 26)]

STR:
Go to https://ants.gouv.fr/

ER:
Website displayed

AR:
SEC_ERROR_UNKNOWN_ISSUER error

Chrome Dev/Beta does not block the site and ssllabs doesn't seem to have an issue with the certificate and indicates that Mozilla trusts the site:
https://www.ssllabs.com/ssltest/analyze.html?d=ants.gouv.fr&latest

Last good revision: 44235c868eaf2f9f718383f24f314a26a0dcc63a
First bad revision: 3709f100f2649fc571f15d142fb29c61010861b3
Pushlog:
https://hg.mozilla.org/integration/mozilla-inbound/pushloghtml?fromchange=44235c868eaf2f9f718383f24f314a26a0dcc63a&tochange=3709f100f2649fc571f15d142fb29c61010861b3

Bug 1550889 - land NSS 8082be3a6363 UPGRADE_NSS_RELEASE

Comment 1

[Dana Keeler (she/her) (use needinfo) [:keeler] (on leave)]

This is expected. That certificate was issued by Certnomis, which was removed in bug 1552374. If you have a contact with folks who run that site, it would be helpful to tell them they need to find a new CA.