MOZILLA_PKIX_ERROR_MITM_DETECTED — Firefox saw a suspicious certificate on a domain with pinned keys (google.com, facebook.com, etc). Not a baseline SSL warning — Firefox thinks you're being MITMed. Causes: corporate proxy (Zscaler, Kaspersky AV), legit parental controls, real attack (rare). DO NOT ignore without cause.
This error blocks HTTPS access. Below: causes, fixes, working config, FAQ.
Free online tool — SSL certificate checker: instant results, no signup.
The MOZILLA_PKIX_ERROR_MITM_DETECTED error in Firefox indicates that a man-in-the-middle (MITM) attack has been detected, often due to improper SSL certificate validation. To resolve this, ensure your connection is secure, verify the server's SSL certificate, and check for installed root certificates. If necessary, clear your browser cache and restart Firefox. For persistent issues, consider disabling any security software that may be interfering.
The MOZILLA_PKIX_ERROR_MITM_DETECTED error occurs when Firefox identifies a potential man-in-the-middle attack during an SSL/TLS handshake. This typically happens when the browser detects that the SSL certificate presented by the server does not match the expected certificate, often due to interception by proxies or firewalls. This security measure is part of Firefox's commitment to protecting users from potential data breaches.
Common causes include:
To further diagnose the issue, you can check the Firefox certificate manager by navigating to about:preferences#privacy and clicking on View Certificates. This allows you to inspect the certificates installed and those that are trusted.
Resolving the MOZILLA_PKIX_ERROR_MITM_DETECTED error may involve a series of troubleshooting steps. Below are detailed instructions to help you address this issue effectively.
Start by checking if a proxy or firewall is affecting your connection:
about:preferences.Next, verify the SSL certificate of the site you are trying to visit:
If you suspect your antivirus software is causing the issue, you can temporarily disable SSL scanning:
Remember to enable it again after troubleshooting to ensure continued protection.
Clearing your browser cache can also help resolve this issue:
about:preferences#privacy.After making these changes, restart Firefox to apply the settings. If the error persists, consider checking for Firefox updates or resetting Firefox to its default settings.
If the issue continues, you can check for specific Firefox errors in the console. Open the console with Ctrl + Shift + K and look for any relevant error messages that can provide further insights.
SSL/TLS is the encryption protocol that protects data between the browser and server. Our tool analyzes the certificate, chain of trust, TLS version, and knownvulnerabilities.
Issuer, validity period, signature algorithm, covered domains (SAN), and validation type (DV/OV/EV).
Full chain verification: from leaf certificate through intermediates to root CA.
Protocol version (TLS 1.2/1.3), cipher suites, Perfect Forward Secrecy (PFS) support.
Set up a monitor — get Telegram and email alerts 30/14/7 days before expiration.
SSL certificate monitoring
TLS config audit
HTTPS as ranking factor
customer trust
www and subdomains.Strict-Transport-Security header forces browsers to always use HTTPS.SSL certificate monitoring, check history and alerts 30 days before expiry.
Sign up freeMozilla pins certain root CAs and detects chain tampering. MITM on google.com is a real phishing vector.
Chrome shows ERR_CERT_SYMANTEC_LEGACY or NET::ERR_CERT_AUTHORITY_INVALID marked "Pinning". Softer message.
Depends. IT decrypts your traffic. You must trust your company's security policies and local law.
<a href="/en/ssl">Enterno SSL checker</a> from a clean network (not your office) — shows real CA.
Free plan — 10 monitors, checks every 5 min, no card required. Upgrade for 1-minute interval and multi-region monitoring.