The error text will also show the current date and time of your system. The certificate will not be valid until date (.) Mozilla's CA Certificate Program publishes a list of upcoming policy actions affecting certificate authorities which contains details that might be useful to the website owners.įor more information, see the Mozilla Security Blog post, Distrust of Symantec TLS Certificates. The owners of the website need to work with their certificate authority to correct the policy problem. Most browsers, not just Firefox, do not trust certificates by GeoTrust, RapidSSL, Symantec, Thawte and VeriSign because these certificate authorities failed to follow security practices in the past. This error indicates that the website's certificate has not complied with security policies in Mozilla's CA Certificate Program.

MOZILLA_PKIX_ERROR _ADDITIONAL_POLICY_CONSTRAINT_FAILED An invalid certificate can be an indication of a web page that will defraud you or steal your identity. Legitimate public sites will not require you to add a security exception for their certificate. Warning! Do not proceed to the website unless you understand the reasons for the security warning.

Insecure browser message