Security error on only firefox.

dunlix

Hello. I seem to have a problem with visiting my forum on Firefox.
Whenever I go to my forum, here is what appears:
.
This ONLY happens in firefox for me, not in chrome on PC/Mobile, Edge on PC, not on safari on mobile.
Why is it doing this? or am i just running outdated FF version

phenomlab

@dunlix I've seen this happen in NGINX and Apache where the root domain certificate is being selected over subdomains and gets priority as a result.

Do you have any other domains running on this server where your site is hosted ?

PitaJ

This might help

Attention Required! | Cloudflare

(cheapsslsecurity.com)

Got there from https://stackoverflow.com/questions/19104215/node-js-express-js-chain-certificate-not-working#comment62178168_20444809

dunlix

@phenomlab Yes I basically have three cert's, one for https://gggrealms.ml (which redirects to forum.gggrealms.ml), one for https://forum.gggrealms.ml, and one for https://unblocked.gggrealms.ml.

phenomlab

@dunlix Are any of the certs wildcards ?

dunlix

@phenomlab nope

phenomlab

@dunlix Ok. I think that an incorrect certificate is being preferred and issued over the actual one. I'm able to replicate your issue with Firefox.

dunlix

@phenomlab But on Chrome it says it is valid for all three?

dunlix

@phenomlab

phenomlab

@dunlix Yes, this makes me think this is "firefox-centric". I've seen this before but I cannot recall what I did to work around it.

dunlix

@phenomlab I think you can ignore this error in the firefox settings, but I dont want my users to have to do that

phenomlab

@dunlix understood. I think that this error is caused by OSCP stapling - see https://support.mozilla.org/en-US/questions/1149911