Yeah.. That&#x27;s suspicious.. Firefox uses it&#x27;s own CA list, so if your install of firefox is up to date, and your system clock is correct then you are potentially being MITM&#x27;d...<p>If that is the case then your browser is exhibiting correct behavior.<p>For me, I can see that the root CA is USERTrust (SHA-384 sig, interestingly), and the server is presenting a valid intermediate (Gandi - also using a SHA-384 signature), then the site certificate (SHA-256 sig).<p>There is a secondary certification path though, coming from a old SHA1 AddTrust Root (but this is also in my trust store for Firefox).