Hello, John--
Are you sure the error page you saw in Firefox was *exactly* the same in both cases? And that you had clicked REMOVE INTERCEPTION CERTIFICATES before restarting? And that, this being Firefox, you retrusted the new CertEnroll root certificate after restarting, reenabling decryption, and exporting it?
I use the "Best Choice" approach with Firefox 40, Firefox 41, and Firefox 44 and have not encountered any problems.
The problem with staying on the "MakeCert" provider is that the certificates it generates will soon not work in Chrome (due to the lack of SubjectAltName) and it's expected that Firefox and other clients may follow suit.
Regards,
Eric Lawrence
Telerik
Are you sure the error page you saw in Firefox was *exactly* the same in both cases? And that you had clicked REMOVE INTERCEPTION CERTIFICATES before restarting? And that, this being Firefox, you retrusted the new CertEnroll root certificate after restarting, reenabling decryption, and exporting it?
I use the "Best Choice" approach with Firefox 40, Firefox 41, and Firefox 44 and have not encountered any problems.
The problem with staying on the "MakeCert" provider is that the certificates it generates will soon not work in Chrome (due to the lack of SubjectAltName) and it's expected that Firefox and other clients may follow suit.
Regards,
Eric Lawrence
Telerik
Do you want to have your say when we set our development plans?
Do you want to know when a feature you care about is added or when a bug fixed?
Explore the
Telerik Feedback Portal
and vote to affect the priority of the items