www.stapleseasyrebates.com problem with cert?

[VirtualLarry]

This is what I get with Waterfox 36.0.4 on someone's new Win8.1 laptop, at their place.
I also get that with my Win7 HP laptop at my place.
I also get that with Linux Mint at my place.
But my other Win7 HP desktop at my place, breezes right through. Same Waterfox 36.0.4.
Is there a cert error? Am I being MITM'ed? Has my Win7 desktop been tampered with (installed fraudulent certs?)

This Connection is Untrusted

You have asked Firefox to connect securely to www.stapleseasyrebates.com, but we can't confirm that your connection is secure.

Normally, when you try to connect securely, sites will present trusted identification to prove that you are going to the right place. However, this site's identity can't be verified.
What Should I Do?

If you usually connect to this site without problems, this error could mean that someone is trying to impersonate the site, and you shouldn't continue.

www.stapleseasyrebates.com uses an invalid security certificate. The certificate is not trusted because no issuer chain was provided. (Error code: sec_error_unknown_issuer)

 

[Chiefcrowe]

Just ran an SSL test and got a bad result - it looks to be vulnerable to the POODLE attack

https://www.ssllabs.com/ssltest/analyze.html?d=rebate.staples.com&hideResults=on

 

[VirtualLarry]

Just ran an SSL test and got a bad result - it looks to be vulnerable to the POODLE attack

https://www.ssllabs.com/ssltest/analyze.html?d=rebate.staples.com&hideResults=on

Actually, that's not the right site. This one is:
https://www.ssllabs.com/ssltest/analyze.html?d=stapleseasyrebates.com&hideResults=on

This one is also vulnerable to POODLE, but has even more problems with it's cert.

 

[VirtualLarry]

I still don't quite understand how the same browser, on the same OS, is functioning differently on different machines though. That's what really gets to me.

 

[Chiefcrowe]

That is pretty odd. Is there any way you can set up a VM on one of the machines to see if it does the same thing? or perhaps put in a new drive and try a fresh install?
It is possible that your OS was compromised somehow?

Also you should probably report this cert issue to Staples.

I still don't quite understand how the same browser, on the same OS, is functioning differently on different machines though. That's what really gets to me.

 

[TheRyuu]

Are you using https everywhere? The Staples rule is disabled for me because it failed their ruleset tests. Also that site redirects to https://rebate.staples.com/staples/home.action for me.

 

[Chiefcrowe]

I'd also recommend the HTTPS Everywhere addon from EFF.