Firefox: certificate is not trusted because issuer certificate is unknown

Question

I work in a lab environment. I have a Windows-based CA and an SSL-protected website in IIS (on the same computer) with certificates from this CA.

When I browse this site in Firefox using SSL, I get the error message "The certificate is not trusted because the issuer certificate is unknown."

If I go to Tools -> Options -> Advanced -> Certificates -> View Certificates -> Authorities, my CA certificate is listed. If I double-clicked this certificate, I get "I can not verify this certificate because the issuer is unknown."

Isn't everything pointing to adding a CA certificate to the Authorities list to tell Firefox: "Hey ... you know this CA, go ahead and trust the certificates that it issues?"

How to fix this problem?

Answer 1

Firefox (mostly in desktop versions) is very good at verifying certificates. If Google Chrome matches the root certificate, Firefox requires a complete chain up to the root certificate in the crt file. And do not forget to put the https: // prefix for the request!