It looks like the Entrust G2 root CA is not trusted by Firefox as it’s not yet listed as a production certificate. Even the Entrust site says “may be used in future product releases”. http://www.entrust.net/developer/ There also appears to be a Bugzilla ticket for having the G2 embedded in Firefox, but it’s dormant right now. https://bugzilla.mozilla.org/show_bug.cgi?id=694536 Personally, I’d suggest that our contact with Entrust open a case to find out why the G2 was used to sign our CSR when it’s not yet considered production. - Ed