Ubuntu Server: How to connect a certificate from a provider?

Question

Apache HTTP Server

Hello!
Ubuntu server 14.04
Riveted own certificate (self-signed) changed default-ssl.conf
SSLEngine
to SSLProtocol all -SSLv2
SSLCertificateFile /etc/apache2/ssl/my.crt
SSLCertificateKeyFile /etc/apache2/ssl/my.key
Everything works.
I ordered a Free certificate from https://buy.wosign.com/free/
CSR did according to their instructions: https://www.wosign.com/support/CSRgen/Apache_CSR.htm
The only command failed was: openssl req -new - config openssl.cnf -key www.mydomain.com.key -out www.mydomain.com.csr
As a result, I get from WoSign 2 crt in the folder.
I'm rocking. I change default-ssl.conf and Apache2 no longer rises:
[Tue Sep 22 14:03:58.215152 2015] [mpm_prefork:notice] [pid 32379] AH00169: caught SIGTERM, shutting down
[Tue Sep 22 14:03:59.268556 2015] [ssl:emerg] [pid 32525] AH02241: Init : Unable to read server certificate from file /etc/apache2/ssl/root.crt
[Tue Sep 22 14:03:59.268642 2015] [ssl:emerg] [pid 32525] SSL Library Error: error:0D0680A8:asn1 encoding routines: ASN1_CHECK_TLEN:wrong tag
[Tue Sep 22 14:03:59.268661 2015] [ssl:emerg] [pid 32525] SSL Library Error: error:0D07803A:asn1 encoding routines:ASN1_ITEM_EX_D2I:nested asn1 error (Type=X509)
[Tue Sep 22 14:03:59.268669 2015] [ssl:emerg] [pid 32525] AH02312: Fatal error initialising mod_ssl, exiting.
The feeling that because of the established PEM pass phrase these goluny.
upd: figured it out. I'll post the solution a little later. ran away for lunch until business lunches stopped selling :)

Answer 1

In general:
1. Follow the steps from here: help.ubuntu.ru/wiki/apache_%D0%B8_https
2. Get a certificate from https://buy.wosign.com/free/
3. CORRECTLY download the certificate file and verify this.
4. Change default-ssl.conf
5. Profit!

Answer 2

https://www.startssl.com/