Firefox 61.x 64-bit missing DigiCert/RapidSSL CA 2018 (likely intermediate certificate misconfiguration)
The bug report describes a Firefox 61.x 64-bit issue where browsing sites using “RapidSSL” results in an SSL error because the Firefox version is “missing DigiCert or ‘RapidSSL RSA CA 2018’.” The reporter provided reproduction steps and noted the issue on additional systems/Firefox versions. The Mozilla CA Program reviewer responded that the distinguished name “RapidSSL RSA CA 2018” appears to correspond to a non-root certificate, and therefore is not expected to be present in the Mozilla Root CA database. The reviewer stated that the more likely cause is that the affected servers are not sending the correct intermediate certificate. As a workaround, the reviewer suggested manually importing the intermediate certificate or visiting a properly configured site that uses the intermediate so Firefox can cache it. The bug was marked RESOLVED with resolution INVALID.
- External reporter reported that Firefox 61.x 64-bit shows SSL errors for sites using RapidSSL, claiming DigiCert/RapidSSL CA 2018 is missing.
- Live representative — Reported steps to reproduce showing Firefox 61.x 64-bit missing “DigiCert” or “RapidSSL RSA CA 2018,” leading to SSL errors when visiting sites using RapidSSL.
- Live representative — Added another example system (Windows 8.1 Pro with Firefox 62.0b17 64-bit) experiencing the same issue.
- Live representative — Provided certificate subject details (CN RapidSSL RSA CA 2018, O DigiCert Inc, OU www.digicert.com) in the report.
- Mozilla representative — Explained that the distinguished name corresponds to a non-root certificate and suggested the issue is likely server misconfiguration of the intermediate; provided workaround steps and links to the intermediate certificate.