Learn about Centmin Mod LEMP Stack today
Register Now

SSL Positive ssl certificate chain order?

Discussion in 'Domains, DNS, Email & SSL Certificates' started by RoldanLT, Sep 7, 2014.

  1. RoldanLT

    RoldanLT Well-Known Member

    3,931
    960
    113
    May 25, 2014
    Phillipines
    Ratings:
    +1,311
    Local Time:
    3:38 AM
    1.11
    10.2
    @eva2000
    What is your order for this?

    cat www_yourdomain_com.crt COMODORSADomainValidationSecureServerCA.crt COMODORSAAddTrustCA.crt >> ssl-unified.crt

    cat COMODORSADomainValidationSecureServerCA.crt COMODORSAAddTrustCA.crt AddTrustExternalCARoot.crt >> ssl-trusted.crt

    Correct?

    I'm asking this because I just change my cert provider to Positive SSL.
     
  2. eva2000

    eva2000 Administrator Staff Member

    30,562
    6,851
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +10,266
    Local Time:
    5:38 AM
    Nginx 1.13.x
    MariaDB 5.5
    from https://community.centminmod.com/premium/

    3 yr GGSSL Wildcard SSL certificate for centminmod.com created with RSA 2048 bit key algorithm and sha256 signature algorithm.
    • Root CA Certificate - AddTrustExternalCARoot.crt
    • Intermediate CA Certificate - COMODORSAAddTrustCA.crt
    • Intermediate CA Certificate - COMODORSADomainValidationSecureServerCA.crt
    • Your GGSSL Wildcard SSL - STAR_centminmod_com.crt
    with root CA
    Code:
    cat STAR_centminmod_com.crt COMODORSADomainValidationSecureServerCA.crt COMODORSAAddTrustCA.crt AddTrustExternalCARoot.crt > centminmod.com-unified.crt
    
    cat COMODORSAAddTrustCA.crt COMODORSADomainValidationSecureServerCA.crt AddTrustExternalCARoot.crt > centminmod.com-trusted.crt
    
    or

    without root CA
    Code:
    cat STAR_centminmod_com.crt COMODORSADomainValidationSecureServerCA.crt COMODORSAAddTrustCA.crt > centminmod.com-unified.crt
    
    cat COMODORSAAddTrustCA.crt COMODORSADomainValidationSecureServerCA.crt AddTrustExternalCARoot.crt > centminmod.com-trusted.crt
    
    from SSL - HTTPS as a Google ranking signal | Centmin Mod Community

     
    • Like Like x 1
  3. RoldanLT

    RoldanLT Well-Known Member

    3,931
    960
    113
    May 25, 2014
    Phillipines
    Ratings:
    +1,311
    Local Time:
    3:38 AM
    1.11
    10.2
    For trusted I thought:

    cat COMODORSADomainValidationSecureServerCA.crt COMODORSAAddTrustCA.crt AddTrustExternalCARoot.crt >> ssl-trusted.crt
     
  4. eva2000

    eva2000 Administrator Staff Member

    30,562
    6,851
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +10,266
    Local Time:
    5:38 AM
    Nginx 1.13.x
    MariaDB 5.5
    Just use the order from post 2 above that's what I am using on this forum :D