Featured Chrome browser 39+ sunsetting SHA-1 SSL signatures

strange then, maybe something changed on SSLlabs end

double check chain order using SSL Certificate Checker - Check for vulnerabilities like HeartBleed to be sure

 

try

Code:

» EssentialSSL / Free Certificate
» Root: AddTrustExternalCARoot.crt
» Intermediate 1: UTNAddTrustSGCCA.crt
» Intermediate 2: ComodoUTNSGCCA.crt
» Intermediate 3: EssentialSSLCA_2.crt
» End-Entity/Domain Certificate

cat root intermediate3 > ssl-trusted.crt

should be root > intermediate 3 > intermediate 2 > intermediate 1 > ssl-trusted.crt

 

what do you mean change the name of the EssentialSSLCA_2.crt file ?

 

so there's now 2 instead of 3 intermediate files ?

Code:

» Intermediate 1: UTNAddTrustSGCCA.crt
» Intermediate 2: ComodoUTNSGCCA.crt

those 2 aren't the same now ?

 

ah i see.. but you still got 3 intermediate files for Essential ?

 

oh I see they change it to the same filenames as Comodo Postive and my GGSSL Wildcard (Comodo brand) certificates

Less confusion in the long run

 

nice... candidates for the site database Centmin Mod Sites Database and Form Added | Centmin Mod Community

 

According to this comment at List any complications with common CAs in getting SHA-2 certs · Issue #24 · konklone/shaaaaaaaaaaaaa · GitHub RapidSSL will start using SHA2 for intermediates from October 1, 2014

But looks like it has come before October 1 - RapidSSL intermediate with SHA2 are now available

 

might double check concatenated order and make sure you're using the right chain certificates

 

from post 35 above