Blog via wix.com

[Johnny_Footwrinkle]

Linux mint 22 , 64 bit, Mate desktop

I have a little blog at

https://infiniteattributes.wixsite.com/ ... attributes

https://infiniteattributes.wixsite.com/ ... butes/blog

It's a free site hosted by wix.com but recently my blog has been throwing out...

" infiniteattributes.wixsite.com uses an invalid security certificate. The certificate is not trusted because the issuer certificate is unknown. The server might not be sending the appropriate intermediate certificates. An additional root certificate may need to be imported. (Error code: SEC_ERROR_UNKNOWN_ISSUER) "

There is nothing in the console, it's blank (see screenshot)

Probelm occurs with palemoon 33.7.0 (and older versions), basilisk, firefox and librewolf. My pc is fully up to date but problem also occurs on linux mint 20 and ubuntu studio (20.04) I've tried resetting my router too, nothing changes it

I can still access wix.com, log in, access the dashboard, edit my site etc (whole blog is currently disabled bar one page for testing by myself), it's just the actual livesite I'm having trouble with

I have spoke to Wix, they keep passing me from person to person and I keep hearing the same thing, we've tested the links and we don't see any issues, can you try with chrome browser please, they are not being very helpful about it so I'm thinking it must be their end and they can't be arsed to go through their code and see what's going on. If it's palemoon doing this it doesn't explain why other browsers are failing. Or it could be something on my system/router/mitm idk.

Any ideas please?

Screenshot at 2025-04-14 08-45-46.png

Screenshot at 2025-04-14 08-46-02.png

[darkarts]

Your site displays just fine for me in Pale Moon 33.7.0.

The site certificate is issued by LetsEncrypt which recently (some months ago) changed their certificate chains so it might be just that your local CA store may not be up to date. Or that you have disabled the LE root or chain in your local store or browser either by accident or design.

Can you access other sites which use the same root cert and chain?

[Johnny_Footwrinkle]

Your site displays just fine for me in Pale Moon 33.7.0.

The site certificate is issued by LetsEncrypt which recently (some months ago) changed their certificate chains so it might be just that your local CA store may not be up to date. Or that you have disabled the LE root or chain in your local store or browser either by accident or design.

Can you access other sites which use the same root cert and chain?

Thank you for the reply, so now I know it's my machine at least, sorry to be a noob but

How would one update the local CA store?

How does one access the LE root/ chain? I'm not aware of changing anything but may have done without realising?

How do I know if other sites are using the same root cert and chain?

Thanks

[darkarts]

How would one update the local CA store?

That is usually handled by a package in your operating system. Look for a package called ca-certificates or something similar and check that it is the most recent version. (I don't use Mint so can't be sure what it is called there)

How does one access the LE root/ chain? I'm not aware of changing anything but may have done without realising?

In Pale Moon, go to Tools->Preferences->Advanced->Certificates->View Certificates->Authorities. In there should be Internet Security Research Group which signs the LE chains.

How do I know if other sites are using the same root cert and chain?

If you are viewing them in the browser you can right-click to get to View Page Info and then to Security->View Certificate->Details which will show you the chain in the top panel. TBH, enough sites use LetsEncrypt these days that you really ought to have noticed if the problem was more widespread than your own site.

One other thing you could try is to run an analysis of your site using any of the freely available scanning tools. I tend to use https://www.ssllabs.com/ssltest/. This will show you if there are any configuration problems - very useful if only a subset of users report a certificate-related issue with a site.

Good luck.

[Johnny_Footwrinkle]

How would one update the local CA store?

That is usually handled by a package in your operating system. Look for a package called ca-certificates or something similar and check that it is the most recent version. (I don't use Mint so can't be sure what it is called there)

ca-certificates is fully up to date, latest version.

How does one access the LE root/ chain? I'm not aware of changing anything but may have done without realising?

In Pale Moon, go to Tools->Preferences->Advanced->Certificates->View Certificates->Authorities. In there should be Internet Security Research Group which signs the LE chains.

I have checked and it contains IRSG certicates, screenshot attached

Screenshot at 2025-04-14 12-53-32.png

How do I know if other sites are using the same root cert and chain?

If you are viewing them in the browser you can right-click to get to View Page Info and then to Security->View Certificate->Details which will show you the chain in the top panel. TBH, enough sites use LetsEncrypt these days that you really ought to have noticed if the problem was more widespread than your own site.

Ok, well no other sites give this error, I am unaware of wether any are LE though, as you say I should have noticed so I am going to assume it is only my site that is causing errors

One other thing you could try is to run an analysis of your site using any of the freely available scanning tools. I tend to use https://www.ssllabs.com/ssltest/. This will show you if there are any configuration problems - very useful if only a subset of users report a certificate-related issue with a site.

Good luck.

I have tried an analysis using that website and it doesn't show anything that stands out, I don't actually know what I'm looking for but can't see anything obvious at least.

https://www.ssllabs.com/ssltest/analyze ... ixsite.com


also, one of the admin is hassling me via private message and trying to threaten and bully me, I may not be able to reply if he spitefully deletes my account

[Admin]

also, one of the admin is hassling me via private message and trying to threaten and bully me, I may not be able to reply if he spitefully deletes my account

A clear request was made from OP's e-mail address to no longer use it for any communication. OP's account has been closed due to unwillingness to keep their e-mail address updated with an active and usable account (despite direct comunication via PM), as well as demanding we break our forum rules to cater to their situation. No bullying occurred and no threats were issued.

This topic is no longer relevant since OP is no longer active. Locking.