Closed Bug 1610895 Opened 4 years ago Closed 4 years ago

SEC_ERROR_UNKNOWN_ISSUER on Trash-mail.com

Categories

(Core :: Security: PSM, defect)

72 Branch
defect
Not set
normal

Tracking

()

RESOLVED DUPLICATE of bug 1535662

People

(Reporter: accountforfirefox, Unassigned)

References

()

Details

User Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:72.0) Gecko/20100101 Firefox/72.0

Steps to reproduce:

Access Trash-mail.com

I got the following informations:
Warning: Potential Security Risk Ahead

Firefox detected a potential security threat and did not continue to www.trash-mail.com. If you visit this site, attackers could try to steal information like your passwords, emails, or credit card details.

What can you do about it?

The issue is most likely with the website, and there is nothing you can do to resolve it.

If you are on a corporate network or using anti-virus software, you can reach out to the support teams for assistance. You can also notify the website’s administrator about the problem.

I got the following cert infos:
about:certificate?cert=MIIF%2FjCCBOagAwIBAgIRANq%2BJQ0%2F6Fhd9z6TsMBHtXMwDQYJKoZIhvcNAQELBQAwgY8xCzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAOBgNVBAcTB1NhbGZvcmQxGDAWBgNVBAoTD1NlY3RpZ28gTGltaXRlZDE3MDUGA1UEAxMuU2VjdGlnbyBSU0EgRG9tYWluIFZhbGlkYXRpb24gU2VjdXJlIFNlcnZlciBDQTAeFw0xOTA5MDUwMDAwMDBaFw0yMDA5MDQyMzU5NTlaMFcxITAfBgNVBAsTGERvbWFpbiBDb250cm9sIFZhbGlkYXRlZDEVMBMGA1UECxMMRXNzZW50aWFsU1NMMRswGQYDVQQDExJ3d3cudHJhc2gtbWFpbC5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLyhQ08X25on%2B42SJz4%2BvJOtc6qY%2Bjzr7yweib6SUfanYitcA%2B0tfsiS87D7cF9IBKSkrj6Pv5%2Bz%2FxWrkT1TVt%2B1wlMqLmyu3B2Hb56hTrQcPQOXvvHf1i4nZdmQFPHo4g9ja6VhalJ0VXF%2BIdXfDK5hNUIcXHFAh1Y8HYD%2FR%2FAPSmea2zriLM4%2FgAPPuSE0%2F%2FTrGlwYhWWaHgDJDwIH7mxuv2oe9KW%2F0fACb2qXx1xc21dY4sCiAWfDkNHVU4aFcLXdxq8KXXNopQNGdYOETfACoe6U5iRfPkD2qilc2AATV38HRMKwlSO45%2BQCIyToWRy3wijlnClydkBiWcpx0DAgMBAAGjggKKMIIChjAfBgNVHSMEGDAWgBSNjF7EVK2K4Xfpm%2FmbBeG4AY1h4TAdBgNVHQ4EFgQUqLaHUFIZF0Imtyii9oDdchDEE7AwDgYDVR0PAQH%2FBAQDAgWgMAwGA1UdEwEB%2FwQCMAAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMEkGA1UdIARCMEAwNAYLKwYBBAGyMQECAgcwJTAjBggrBgEFBQcCARYXaHR0cHM6Ly9zZWN0aWdvLmNvbS9DUFMwCAYGZ4EMAQIBMIGEBggrBgEFBQcBAQR4MHYwTwYIKwYBBQUHMAKGQ2h0dHA6Ly9jcnQuc2VjdGlnby5jb20vU2VjdGlnb1JTQURvbWFpblZhbGlkYXRpb25TZWN1cmVTZXJ2ZXJDQS5jcnQwIwYIKwYBBQUHMAGGF2h0dHA6Ly9vY3NwLnNlY3RpZ28uY29tMC0GA1UdEQQmMCSCEnd3dy50cmFzaC1tYWlsLmNvbYIOdHJhc2gtbWFpbC5jb20wggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdgCyHgXMi6LNiiBOh2b5K7mKJSBna9r6cOeySVMt74uQXgAAAW0BC1%2B6AAAEAwBHMEUCIDI%2FoyplfUciWAvsFQy6CLzbkxb30eZ%2Fc9TrhB9F4KloAiEAnURA6Ybm%2Fj8wz8GSSU0zUx6EpfHeUWsJf0BCYYTIoCgAdgBep3P531bA57U2SH3QSeAyepGaDIShEhKEGHWWgXFFWAAAAW0BC1%2FYAAAEAwBHMEUCIQD%2Fu82q0U%2BlVg3trWk8xbujEkSeGd%2Fdc8Kas9RT7kgpagIgBV4l0oj4%2Fsj9gKC7XoY1q7byQwlXHn4Vj%2FclUOQHT4MwDQYJKoZIhvcNAQELBQADggEBAJeSo4VvtwCzuCZsalc5W3vQVLAcRZaO%2FB3LlgZjLWnMeHdEqZhPErsh4kq123xRpL%2F1Umgl9mI4LsJz3F1lzCk1GK9nQI9bWvMSHeljohqjXkHCOZDuOIO82MVsyQcPDcbjwLF7oJne07xAcqTTOVmIr0fgHxojQAU7HgOcqqw3o1NOlcJ3amRo4CZ9qAnk6RFWfJqgYruLflqgYoANIZHX%2F2hDHazfPI3d9isJ5DynZYpznpgbh7142iRezgYGKOUcRK%2FH9ODL1BAfjZbToz%2FqvcyBNDfpp1JaCjttrNPzSRDKXcqQnfhkUSCLIcdgF2W7jkF17Sh4pNFlhfwRkXo%3D&cert=MIIGCDCCA%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%2BG%2BeMGnD4LgYqbSRutA776S9uMIO3Vzl5ljj4Nr0zCsLdFXlIvNN5IJGS0Qa4Al%2Fe%2BZ96e0HqnU4A7fK31llVvl0cKfIWLIpeNs4TgllfQcBhglo%2FuLQeTnaG6ytHNe%2BnEKpooIZFNb5JPJaXyejXdJtxGpdCsWTWM%2F06RQ1A%2FWZMebFEh7lgUq%2F51UHg%2BTLAchhP6a5i84DuUHoVS3AOTJBhuyydRReZw3iVDpA3hSqXttn7IzW3uLh0nc13cRTCAquOyQQuvvUSH2rnlG51%2FruWFgqUCAwEAAaOCAWUwggFhMB8GA1UdIwQYMBaAFLuvfgI9%2BqbxPISOre44mOzZMjLUMB0GA1UdDgQWBBSQr2o6lFoL2JDqElZz30O0Oija5zAOBgNVHQ8BAf8EBAMCAYYwEgYDVR0TAQH%2FBAgwBgEB%2FwIBADAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwGwYDVR0gBBQwEjAGBgRVHSAAMAgGBmeBDAECATBMBgNVHR8ERTBDMEGgP6A9hjtodHRwOi8vY3JsLmNvbW9kb2NhLmNvbS9DT01PRE9SU0FDZXJ0aWZpY2F0aW9uQXV0aG9yaXR5LmNybDBxBggrBgEFBQcBAQRlMGMwOwYIKwYBBQUHMAKGL2h0dHA6Ly9jcnQuY29tb2RvY2EuY29tL0NPTU9ET1JTQUFkZFRydXN0Q0EuY3J0MCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5jb21vZG9jYS5jb20wDQYJKoZIhvcNAQEMBQADggIBAE4rdk%2BSHGI2ibp3wScF9BzWRJ2pmj6q1WZmAT7qSeaiNbz69t2Vjpk1mA42GHWx3d1Qcnyu3HeIzg%2F3kCDKo2cuH1Z%2Fe%2BFE6kKVxF0NAVBGFfKBiVlsit2M8RKhjTpCipj4SzR7JzsItG8kO3KdY3RYPBpsP0%2FHEZrIqPW1N%2B8QRcZs2eBelSaz662jue5%2FDJpmNXMyYE7l3YphLG5SEXdoltMYdVEVABt0iN3hxzgEQyjpFv3ZBdRdRydg1vs4O2xyopT4Qhrf7W8GjEXCBgCq5Ojc2bXhc3js9iPc0d1sjhqPpepUfJa3w%2F5Vjo1JXvxku88%2BvZbrac2%2F4EjxYoIQ5QxGV%2FIz2tDIY%2B3GH5QFlkoakdH368%2BPUq4NCNk%2BqKBR6cGHdNXJ93SrLlP7u3r7l%2BL4HyaPs9Kg4DdbKDsx5Q5XLVq4rXmsXiBmGqW5prU5wfWYQ%2F%2Fu%2Baen%2Fe7KJD2AFsQXj4rBYKEMrltDR5FL1ZoXX%2FnUh8HCjLfn4g8wGTeGrODcQgPmlKidrv0PJFGUzpII0fxQ8ANAe4hZ7Q7drNJ3gjTcBpUC2JD5Leo31Rpg0Gcg19hCC0Wvgmje3WYkN5AplBlGGSW4gNfL1IYoakRwJiNiqZ%2BGb7%2B6kHDSVneFeO%2FqJakXzlByjAA6quPbYzSf%2BAZxAeKCINT%2Bb72x&cert=MIIFdDCCBFygAwIBAgIQJ2buVutJ846r13Ci%2FITeIjANBgkqhkiG9w0BAQwFADBvMQswCQYDVQQGEwJTRTEUMBIGA1UEChMLQWRkVHJ1c3QgQUIxJjAkBgNVBAsTHUFkZFRydXN0IEV4dGVybmFsIFRUUCBOZXR3b3JrMSIwIAYDVQQDExlBZGRUcnVzdCBFeHRlcm5hbCBDQSBSb290MB4XDTAwMDUzMDEwNDgzOFoXDTIwMDUzMDEwNDgzOFowgYUxCzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAOBgNVBAcTB1NhbGZvcmQxGjAYBgNVBAoTEUNPTU9ETyBDQSBMaW1pdGVkMSswKQYDVQQDEyJDT01PRE8gUlNBIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAkehUktIKVrGsDSTdxc9EZ3SZKzejfSNwAHG8U9%2FE%2BioSj0t%2FEFa9n3Byt2F%2FyUsPF6c947AEYe7%2FEZfH9IY%2BCvo%2BXPmT5jR62RRr55yzhaCCenavcZDX7P0N%2Bpxs%2Bt%2BwgvQUfvm%2BxKYvT3%2BZf7X8Z0NyvQwA1onrayzT7Y%2BYHBSrfuXjbvzYqOSSJNpDa2K4Vf3qwbxstovzDo2a5JtsaZn4eEgwRdWt4Q08RWD8MpZRJ7xnw8outmvqRsfHIKCxH2XeSAi6pE6p8oNGN4Tr6MyBSENnTnIqm1y9TBsoilwie7SrmNnu4FGDwwlGTm0%2BmfqVF9p8M1dBPI1R7Qu2XK8sYxrfV8g%2FvOldxJuvRZnio1oktLqpVj3Pb6r%2FSVi%2B8Kj%2F9Lit6Tf7urj0Czr56ENCHonYhMsT8dm74YlguIwoVqwUHZwK53Hrzw7dPamWoUi9PPevtQ0iTMARgexWO%2FbTouJbt7IEIlKVgJNp6I5MZfGRAy1wdALqi2cVKWlSArvX31BqVUa%2FoKMoYX9w0MOiqiwhqkfOKJwGRXa%2FghgntNWutMtQ5mv0TIZxMOmm3xaG4Nj%2FQN370EKIf6MzOi5cHkERgWPOGHFrK%2BymircxXDpqR%2BDDeVnWIBqv8mqYqnK8V0rSS527EPywTEHl7R09XiidnMy%2Fs1Hap0flhFMCAwEAAaOB9DCB8TAfBgNVHSMEGDAWgBStvZh6NLQm9%2FrEJlTvA73gJMtUGjAdBgNVHQ4EFgQUu69%2BAj36pvE8hI6t7jiY7NkyMtQwDgYDVR0PAQH%2FBAQDAgGGMA8GA1UdEwEB%2FwQFMAMBAf8wEQYDVR0gBAowCDAGBgRVHSAAMEQGA1UdHwQ9MDswOaA3oDWGM2h0dHA6Ly9jcmwudXNlcnRydXN0LmNvbS9BZGRUcnVzdEV4dGVybmFsQ0FSb290LmNybDA1BggrBgEFBQcBAQQpMCcwJQYIKwYBBQUHMAGGGWh0dHA6Ly9vY3NwLnVzZXJ0cnVzdC5jb20wDQYJKoZIhvcNAQEMBQADggEBAGS%2Fg%2FFfmoXQzbihKVcN6Fr30ek%2B8nYEbvFScLsePP9NDXRqzIGCJdPDoCpdTPW6i6FtxFQJdcfjJw5dhHk3QBN39bSsHNA7qxcS1u80GH4r6XnTq1dFDK8o%2BtDb5VCViLvfhVdpfZLYUspzgb8c8%2Ba4bmYRBbMelC1%2FkZWSWfFMzqORcUx8Rww7Cxn2obFshj5cqsQugsv5B5a6SE2Q8pTIqXOi6wZ7I53eovNNVZ96YUWYGGjHXkBrI%2FV5eu%2BMtWuLt29G9HvxPUsE2JOAWVrgQSQdso8VYFhH2%2B9uRv0V9dlfmrPb2LjkQLPNlzmuhbsdjrzch5vRpu%2FxO28QOG8%3D

Actual results:

SEC_ERROR_UNKNOWN_ISSUER

Expected results:

open website trash-mail.com

Works fine on Chrome

Your certificate details show COMODO RSA Domain Validation Secure Server CA / COMODO RSA Certification Authority.
Mine says Sectigo RSA Domain Validation Secure Server CA / USERTrust RSA Certification Authority.

A developer will look over this bug and determine whether that's something to address in Firefox.

Component: Untriaged → Security: PSM
Product: Firefox → Core
Summary: SEC_ERROR_UNKNOWN_ISSUER on Trash-mail.com → SEC_ERROR_UNKNOWN_ISSUER on Trash-mail.com with Comodo security software

The server isn't sending the right intermediates - see https://www.ssllabs.com/ssltest/analyze.html?d=www.trash-mail.com
Bug 1535662 should address this.

Status: UNCONFIRMED → RESOLVED
Closed: 4 years ago
Resolution: --- → DUPLICATE

Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0
20200117190643

The site loads fine for me though I don't think I've visited it before. Can certificates get picked up on one site and get used on another? I can reproduce the issue in a brand new profile though.

Summary: SEC_ERROR_UNKNOWN_ISSUER on Trash-mail.com with Comodo security software → SEC_ERROR_UNKNOWN_ISSUER on Trash-mail.com
You need to log in before you can comment on or make changes to this bug.