I am checking my Firefox 'Certificate Manager' - I am unable to find this Google Certificate:
serial#: 01 00 21 25 88 b0 fa 59 a7 77 ef 05 7b 66 27 df issuer: CN = GeoTrust Global CA/O = GeoTrust Inc./C = US subject: CN = Google Internet Authority G2/O = Google Inc/C = US
If I try and import the 'cer' file itself; Firefox says:
/!\ This certificate is already installed as a certificate Authority.
But when I scroll through the Certificate Manager; I can't see anything which has 'Google' in it.
For the 'G' list I have only:
1. Generalitat Valencia 2. GeoTrust Inc. 3. GlobalSign 4. GlobalSign nv-sa 5. GoDaddy.com, Inc. 6. Government Root Certificate Authority 7. GTE Corporation
So where is this Certificate hiding ? Firefox 56.0.1, Windows 7. No issues with other SSL sites (ebay, amazon, yahoo, others); no issues with google in IE, Chrome.
Some months back - I deliberately went through my Firefox-provided CAs; and only enabled a handful of them - which I know I need. (rather than than the 70 odd that Firefox think I might need).
This worked-out just fine: I was able to 'add exception' when I found a site which wasn't already covered.
All of a sudden I am unable to connect to any Google.com (or google.co.uk), And Firefox doesn't offer me the opportunity to 'add exception' , since it says this:
Your connection is not secure
The owner of www.google.co.uk has configured their web site improperly. To protect your information from being stolen, Firefox has not connected to this web site.
This site uses HTTP Strict Transport Security (HSTS) to specify that Firefox only connect to it securely. As a result, it is not possible to add an exception for this certificate.