Please make sure the time and date is properly set on your computer.

Correctly set with ntp enabled and configured for correct tz.

Check out why the site is untrusted (click "Technical Details to expand that section) and if this is caused by a missing intermediate certificate then see if you can install this intermediate certificate from another source.

You can retrieve the certificate and check details like who issued certificates and expiration dates of certificates.

• Click the link at the bottom of the error page: "I Understand the Risks"

Let Firefox retrieve the certificate: "Add Exception" -> "Get Certificate".

• Click the "View..." button and inspect the certificate and check who is the issuer of the certificate.

You can see more Details like intermediate certificates that are used in the Details pane.

If "I Understand the Risks" is missing then this page may be opened in an (i)frame and in that case try the right-click context menu and use "This Frame: Open Frame in New Tab".

You can also check the certificate in Google Chrome (click icon in the location bar) as that program may be giving a more detailed error report.

I've done this several times and I'll get as the actual error when I view details:

www.statefarm.com uses an invalid security certificate.

The certificate is not trusted because the issuer certificate is not trusted.

(Error code: sec_error_untrusted_issuer)

When I go to add the cert I get the following info about the ca:

(see inserted image)

I had gone through the motions of adding the certificate in Google Chrome and today it seems to be working, but not in FF. Previously (I thing on the 7th) it did not work, but I had reinstalled ca-certificates since then without rechecking it on Chrome.

Do you see this certificate chain?

• http://www.networking4all.com/en/support/tools/site+check/report/?fqdn=www.statefarm.com&protocol=https

Try to rename the cert8.db file in the Firefox profile folder to cert8.db.old or delete the cert8.db file to remove intermediate certificates that Firefox has stored.

If that helped to solve the problem then you can remove the renamed cert8.db.old file. Otherwise you can rename (or copy) the cert8.db.old file to cert8.db to restore the previous intermediate certificates. Firefox will automatically store intermediate certificates when you visit websites that send such a certificate.

You can use this button to go to the Firefox profile folder:

• Help > Troubleshooting Information > Profile Directory: Show Folder (Linux: Open Directory; Mac: Show in Finder)

Also check the date and time in the clock on your computer

• https://support.mozilla.org/kb/Secure+Connection+Failed

I've tried removing cert8.db about 3 times, even copied cert8.db from the working system.

My clock is right on. The BIOS is set to UTC while ntp is set to ET w/ DST enabled.