Comment 17 for bug 476683

I talked with the engineering team in Japan this morning and they are going to build a test environment to simulate the issue. I want to have a 2nd test bed local to me so I've purchased an Intel x64 machine for testing in EMEA. I would suspect we can get some preliminary results by the end of the week and I can try to simulate over the weekend and into early next week.

A shot in the dark is that GlobalSign has two roots with the same key material. One that expires in 2014 which was originally embedded in Fox. The second which was created more recently and is in current builds is embedded into the latest fox. In general the roots are seen as the same thing so no problem.

Ron, can you test these sites and give me the results?

https://2014.globalsign.com Legacy version in early Fox
https://2028.globalsign.com Current version in latest Fox
https://2021.globalsign.com Different root (Sanity check) only in latest

Of the failing websites in the post. https://cosmos.constellationmedia.com delivers the 2028 root and www.globalsign.com delivers the 2014 root in the response, so this could be a dead end test.

Thanks everyone.