Firefox is unable to verify some certificates

Latest response

I've run in a weird issue with Firefox from rhel7.2 repositories (tested versions 38.7.0 to 45.2.0) where FF is unable to verify some certificates. Specifically https://code.jquery.com/ certificate (verified by GlobalSign nv-sa), see attached image.

The same site is verified by vanilla Firefox packages (running on rhel7.2) and openssl as below. Anyone has any idea what's going on or how to troubleshoot?

~~~
$ openssl s_client -connect code.jquery.com:443
CONNECTED(00000003)
depth=2 C = BE, O = GlobalSign nv-sa, OU = Root CA, CN = GlobalSign Root CA
verify return:1
depth=1 C = BE, O = GlobalSign nv-sa, CN = AlphaSSL CA - SHA256 - G2
verify return:1
depth=0 C = GB, OU = Domain Control Validated by OneClickSSL, CN = code.jquery.com
verify return:1
...
SSL-Session:
Protocol : TLSv1.2
Cipher : ECDHE-RSA-AES256-GCM-SHA384
...
~~~

MG

Responses