SEC_ERROR_REVOKED_CERTIFICATE error only on PC Firefox

user_1027031 0
Viewed 2143

This site (https://ssptrades.com) is currently giving me SSL problems... but only PC Firefox.

I can tell the certificate is TSL 1.2 by looking at it in another browser...would that be a problem? If it is how can I generate a certifcate or certificate request for TLS 1.3 using IIS?

This is the error on pc firefox 81.0.2 (64 bit)

An error occurred during a connection to ssptrades.com. Peer’s Certificate has been revoked.

Error code: SEC_ERROR_REVOKED_CERTIFICATE

The page you are trying to view cannot be shown because the authenticity of the received data could not be verified.
Please contact the website owners to inform them of this problem.
firefox certificate iis ssl browser
2 Answers
user_30810180

I can't tell why neither Chrome nor Edge check the revocation status, but Firefox is right. The certificate was revoked on Nov. 5 since GoDaddy believes that ssptrades.com has stopped operations.

How to check revocation manually

  1. Save the certificate of ssptrades.com to the file site.cer, and the issuer's certificate to the file gd1.cer

  2. Obtain the URL to OCSP service:

openssl x509 -noout -ocsp_uri -in site.cer

Output: http://ocsp.godaddy.com/

  1. Check OCSP status:
openssl ocsp -issuer gd1.cer -cert site.cer -text -url http://ocsp.godaddy.com/

(shortened) output:

OCSP Response Data:
    OCSP Response Status: successful (0x0)
    Response Type: Basic OCSP Response
    Version: 1 (0x0)
    Responder Id: C = US, ST = Arizona, L = Scottsdale, O = GoDaddy Inc., CN = Go Daddy Validation Authority - G2
    Produced At: Nov  6 20:11:53 2020 GMT
    Responses:
    Certificate ID:
      Hash Algorithm: sha1
      Issuer Name Hash: B6080D5F6C6B76EB13E438A5F8660BA85233344E
      Issuer Key Hash: 40C2BD278ECC348330A233D7FB6CB3F0B42C80CE
      Serial Number: 54FC3E8F69D995CF
    Cert Status: revoked
    Revocation Time: Nov  5 20:08:54 2020 GMT
    Revocation Reason: cessationOfOperation (0x5)

The last threee lines tell us: the certificate was revoked on Nov 5, the reason is "cessation of operations" (code 0x5)

user_90475890
Related