S
S
Sasha Odarchuk2017-10-25 16:35:55
Digital certificates
Sasha Odarchuk, 2017-10-25 16:35:55

Incorrect order, Extra certs, Contains anchor - what's the problem with SSL?

Hello!
There are 2 wildcard certificates from AlphaSSL (+ private.key to them),
each of them (according to the same procedure) was converted to .PFX
and each of them is used with its own Exchange 2010.
C 1m everything is OK and on the second error - A revocation check could not be performed for the certificate
and https://www.ssllabs.com/ssltest/analyze.html shows an error:
Chain issues: Incorrect order, Extra certs, Contains anchor
CHADNT and how to fix the error ???

Answer the question

In order to leave comments, you need to log in

1 answer(s)
S
Sergey Biryukov, 2018-07-02
@Serjio999

The certificate should contain (example):
----BEGIN PRIVATE KEY-----
[Your private certificate]
-----END PRIVATE KEY-----
----BEGIN CERTIFICATE-----
[ Your certificate]
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
[Intermidate#1 certificate]
-----END CERTIFICATE-----
----- BEGIN CERTIFICATE-----
[Intermidate#2 certificate]
-----END CERTIFICATE-----
ROOT this is not desirable (otherwise there will be a warning about "Chain issues - Contains anchor" when checking the certificate).
So you only need to rebuild the pfx file, without ROOT

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question