ssl certificate not working in firefox?

Question

Nginx

Good afternoon. Firefox gives the following error.



Additionally indicated.

site.ru is using an invalid security certificate. The certificate is not trusted because its issuer's certificate is unknown. The server might not have sent the appropriate intermediate certificates. You may need to import an additional root certificate. Error Code: SEC_ERROR_UNKNOWN_ISSUER

In other browsers, everything is ok!



nginx config

server {
  listen 443 ssl;
  ssl on;
  ssl_certificate     /etc/ssl/www_site_ru.crt;
  ssl_certificate_key /etc/ssl/456655.key;
  
  server_name site.ru www.site.ru;
  root /var/www/new.site.ru/public;
  index index.php;

  access_log /var/www/new.site.ru/log/access.log;
  error_log /var/www/new.site.ru/log/warn.log warn; 
  
  location ~ \.php$ {
    fastcgi_pass unix:/var/run/php/php7.0-fpm.sock; 
    fastcgi_index index.php;
    fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
    fastcgi_param PATH_INFO $fastcgi_script_name;
    fastcgi_param HTTPS on;
    include fastcgi_params;
  }
  
  location / {
    index  index.php;
    try_files $uri $uri/ /index.php?$args;
  }
}

Who is smarter? who knows what is the problem?

Answer 1

Basically, I'm a slacker.
It was necessary to combine two files .crt and .ca-bundle.
I just took from the .ca-bundle and transferred the keys to .crt . There were
three such blocks.
-----BEGIN CERTIFICATE-----
.......
-----END CERTIFICATE-----
Everything worked.
Here is where I got the info that they need to be combined)