# SSL not accepted by firefox on android **URL:** \ **Category:** Help\ **Created:** [March 11, 2022, 9:55am UTC](https://community.letsencrypt.org/t/ssl-not-accepted-by-firefox-on-android/173598 "2022-03-11T09:55:50Z")\ **Posts on this page:** 6\ **Page:** 1
**Author:** ![Jochen2](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/jochen2/32/59122_2.png) [@Jochen2](https://community.letsencrypt.org/u/Jochen2)\ **Post date:** [March 11, 2022, 9:55am UTC](https://community.letsencrypt.org/t/ssl-not-accepted-by-firefox-on-android/173598/1 "2022-03-11T09:55:51Z")
My domain is: [mansimaheta.com](http://mansimaheta.com), and I am using Really Simple SSL for wordpress (version 5.3.0). ![image](https://global.discourse-cdn.com/letsencrypt/original/3X/d/8/d8c341cd3712ea69365c95938289a5c956486719.png) Everything seems to work fine, however, Firefox on android returns "Secure Connection Failed" (Firefox on Windows works just fine). It also says "The page you are trying to view cannot be shown because the authenticity of the data could not be verified" and "Please contact the website owners to inform them of this problem" My domain and hosting provider is namecheap (I have shared hosting). I contacted their support, and they told me I should contact you ("As for the domain [mansimaheta.com](http://mansimaheta.com), the issue is related to the SSL certificate. According to our check, the domain uses SSL by Let's Encrypt. It would be necessary to contact their support.") My issue seems to be distinct from this issue: > [@Firefox and Chrome on android raising issues with SSL](https://community.letsencrypt.org/t/firefox-and-chrome-on-android-raising-issues-with-ssl/26599): > > I… Because as far as I can tell, the ssllabs test does not return ‘This server’s certificate chain is incomplete’. Also, chrome on android works for me Not sure whether this helps, but this is what I see in the cpanel: | Certificate ID: | mansimaheta\_com\_d14f9\_85f55\_1652525960\_2459e88b33681ca9b2364d4755570371 | | --- | --- | | Domains: | [mansimaheta.com](http://mansimaheta.com)[www.mansimaheta.com](http://www.mansimaheta.com) | | Issuer: | Let's Encrypt | | Key: | RSA, 4,096-bit (d14f9d00 …) | | Expiration: | May 14, 2022 10:59:21 AM | ---
**Author:** ![9peppe](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/9peppe/32/31596_2.png) [@9peppe](https://community.letsencrypt.org/u/9peppe)\ **Post date:** [March 11, 2022, 4:04pm UTC](https://community.letsencrypt.org/t/ssl-not-accepted-by-firefox-on-android/173598/2 "2022-03-11T16:04:17Z")
> [@Jochen2](#): > > Firefox on android returns "Secure Connection Failed" (Firefox on Windows works just fine) Firefox (98.0) on Windows definitely does not work fine: it complains `MOZILLA_PKIX_ERROR_REQUIRED_TLS_FEATURE_MISSING` > [@Jochen2](#): > > Because as far as I can tell, the ssllabs test does not return ‘This server’s certificate chain is incomplete’. No, it doesn't. But it [does tell you](https://www.ssllabs.com/ssltest/analyze.html?d=mansimaheta.com&hideResults=on) something else: > **This server certificate supports OCSP must staple but OCSP response is not stapled.** So you should either tell your hosting to enable OCSP stapling or to avoid asking for the ocsp-must-staple extension (it's better if they actually do both). ---
**Author:** ![9peppe](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/9peppe/32/31596_2.png) [@9peppe](https://community.letsencrypt.org/u/9peppe)\ **Post date:** [March 11, 2022, 4:31pm UTC](https://community.letsencrypt.org/t/ssl-not-accepted-by-firefox-on-android/173598/3 "2022-03-11T16:31:10Z")
Ok, your that Wordpress plugin is not very good at explaining what it does when asking about OCSP. The "Enable OCSP" switch they added actually enables OCSP must staple, that can be useful but it's usually not. OCSP must then be enabled [at the web server level](https://httpd.apache.org/docs/trunk/mod/mod_ssl.html#sslusestapling), in cPanel, probably. [https://plugins.trac.wordpress.org/browser/really-simple-ssl/trunk/lets-encrypt/class-letsencrypt-handler.php#L59](https://plugins.trac.wordpress.org/browser/really-simple-ssl/trunk/lets-encrypt/class-letsencrypt-handler.php#L59) What pisses me off is that they forced you to obtain a certificate in this nearly manual way instead of just making you throw a switch in cPanel. Assholes. I'd look for another hosting provider. There are several that offer literally effortless configuration of Let's Encrypt certificates. ---
**Author:** ![Jochen2](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/jochen2/32/59122_2.png) [@Jochen2](https://community.letsencrypt.org/u/Jochen2)\ **Post date:** [March 11, 2022, 10:55pm UTC](https://community.letsencrypt.org/t/ssl-not-accepted-by-firefox-on-android/173598/4 "2022-03-11T22:55:09Z")
Hello, thanks for the detailed response! I just received below response from namecheap, I guess the thread can be closed. > OCSP Stapling requires global-server changes which, unfortunately, cannot be implemented on Shared hosting. > Thus, to our deepest regret, we will not be able to change this for your domain. If you would like to use specifically LetEncrypt for this domain, you can consider using our VPS servers for it. ---
**Author:** ![9peppe](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/9peppe/32/31596_2.png) [@9peppe](https://community.letsencrypt.org/u/9peppe)\ **Post date:** [March 11, 2022, 11:05pm UTC](https://community.letsencrypt.org/t/ssl-not-accepted-by-firefox-on-android/173598/5 "2022-03-11T23:05:56Z")
They are blatantly lying. Enabling ocsp stapling has no negative effect on people that don't need it. In the meantime you can disable ocsp must-staple and get another certificate, but really think about getting a hosting that automatically installs Let's Encrypt certificates for you. Your current one doesn't because they want to sell you their certificates. ---
**Author:** ![system](https://global.discourse-cdn.com/letsencrypt/original/3X/c/a/ca6c06ea1ea201324bba7048c6841ce60236468d.png) [@system](https://community.letsencrypt.org/u/system)\ **Post date:** [April 10, 2022, 11:06pm UTC](https://community.letsencrypt.org/t/ssl-not-accepted-by-firefox-on-android/173598/6 "2022-04-10T23:06:55Z")
This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.