diff --git a/src/chrome/content/rules/Nic.ir.xml b/src/chrome/content/rules/Nic.ir.xml
index 4d37ca098bbb..5bcc89a1eae6 100644
--- a/src/chrome/content/rules/Nic.ir.xml
+++ b/src/chrome/content/rules/Nic.ir.xml
@@ -1,12 +1,14 @@
 <!--
 	Expired:
-		- tools
-		- whois
+		- tools.nic.ir
+		- whois.nic.ir
+
+	Incomplete certificate chain:
+		- rrmt.nic.ir
 -->
-<ruleset name="Nic.ir" default_off="cert-chain">
+<ruleset name="Nic.ir">
 	<target host="nic.ir" />
 	<target host="www.nic.ir" />
-	<target host="rrmt.nic.ir" />
 
 	<rule from="^http:" to="https:" />
 </ruleset>
diff --git a/utils/ruleset-whitelist.csv b/utils/ruleset-whitelist.csv
index 6bb400b9d972..62ab0fdb690d 100644
--- a/utils/ruleset-whitelist.csv
+++ b/utils/ruleset-whitelist.csv
@@ -3387,6 +3387,7 @@ e47e410bcc64b4fbf107fcbac795a208e8fef9de4bbb8cfba3021b6a48e973e2,1,0,London_City
 950c332fffb26fd13d4649fa4f152271df5198ce2c53d840c04c1cdd7f9ff8ff,1,0,MandS.xml
 3b2860a4494f8922f5b894c16b5c4fb0117cd9d79a785e836ec6683c02e08a93,1,0,Man_Group.xml
 3f024ea0e05f1b565d534ccfa025f54897e13765f785d1cc7c210f493bd4c0b7,1,0,Monetate.xml
+f97765db8ea0f75e2d5ce711e6454cd9b692e372e5e1ef99be2d15f2e44ec290,0,1,Nic.ir.xml
 c3af1d443429a1173c1cd0646db47c820d9580ebe44cef84dadc612cf845f16a,1,0,O2_online.de.xml
 a75d4a62d470552e6ef9bcfecdd60e98f64930d84abca3e881cb3bc45e3f4518,1,0,Omtrdc.net.xml
 c50eaa29c08c79598b85124d8472c939cbb08abcd36df7a21512bb92606cb600,1,1,Outernet.is.xml