350480 - Mozilla does not recognize SSL certificates issued by Microsoft Secure Server Authority

Status: RESOLVED DUPLICATE of bug 245609

(Firefox :: Security, defect)

Description

[John Waters]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US; rv:1.8.0.6) Gecko/20060728 Firefox/1.5.0.6
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8b2) Gecko/20050702

Mozilla displays the 'Website Certified by an Unknown Authority' SSL warning if I visit a site that uses an SSL certificate issues by Microsoft Secure Server Authority.  

I've noted the following:
* Firefox appears not to recognize Microsoft Secure Server Authority.  I'm not sure what the criteria is for inclusion as a recognized CA.
* The O & OU certificates are listed as 'Not Part Of Certificate'; however, they are present. (Microsoft & MSDN, respectively).  This may be a separate, unrelated parsing issue.

MSIE 6.0 shows the certification path as:
GTE CyberTrust Global Root
  Microsoft Internet Authority
    Microsoft Secure Server Authoritiy
      <website>

I have experienced this on the following sites:
https://blogs.msdn.com
https://secure.shared.live.com
https://c.msn.com

Reproducible: Always

Steps to Reproduce:
1. Using the latest nightly build of Mozilla or FireFox 1.5.0.6, navigate to https://blogs.msdn.com.


Actual Results:  
You receive the 'Website Certified by an Unknown Authority' message.

Expected Results:  
I expected the SSL certificate to be recognized and the website displayed without any warning message.

Comment 1

[Ryan Flint [:rflint] (ping via IRC for reviews)]

*** This bug has been marked as a duplicate of 245609 ***