/ Register

Learn about Centmin Mod LEMP Stack today
Register Now

SSL Positive ssl certificate chain order?

Discussion in 'Domains, DNS, Email & SSL Certificates' started by rdan, Sep 7, 2014.

Tags:
Previous Thread Next Thread
Loading...
  1. Sep 7, 2014 #1
    rdan

    rdan Well-Known Member

    5,439
    1,397
    113
    May 25, 2014
    Ratings:
    +2,186
    Local Time:
    10:42 PM
    Mainline
    10.2
    @eva2000
    What is your order for this?

    cat www_yourdomain_com.crt COMODORSADomainValidationSecureServerCA.crt COMODORSAAddTrustCA.crt >> ssl-unified.crt

    cat COMODORSADomainValidationSecureServerCA.crt COMODORSAAddTrustCA.crt AddTrustExternalCARoot.crt >> ssl-trusted.crt

    Correct?

    I'm asking this because I just change my cert provider to Positive SSL.
     
  2. Sep 7, 2014 #2
    eva2000

    eva2000 Administrator Staff Member

    53,142
    12,108
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +18,643
    Local Time:
    12:42 AM
    Nginx 1.27.x
    MariaDB 10.x/11.4+
    from https://community.centminmod.com/premium/

    3 yr GGSSL Wildcard SSL certificate for centminmod.com created with RSA 2048 bit key algorithm and sha256 signature algorithm.
    • Root CA Certificate - AddTrustExternalCARoot.crt
    • Intermediate CA Certificate - COMODORSAAddTrustCA.crt
    • Intermediate CA Certificate - COMODORSADomainValidationSecureServerCA.crt
    • Your GGSSL Wildcard SSL - STAR_centminmod_com.crt
    with root CA
    Code:
    cat STAR_centminmod_com.crt COMODORSADomainValidationSecureServerCA.crt COMODORSAAddTrustCA.crt AddTrustExternalCARoot.crt > centminmod.com-unified.crt

cat COMODORSAAddTrustCA.crt COMODORSADomainValidationSecureServerCA.crt AddTrustExternalCARoot.crt > centminmod.com-trusted.crt
    or

    without root CA
    Code:
    cat STAR_centminmod_com.crt COMODORSADomainValidationSecureServerCA.crt COMODORSAAddTrustCA.crt > centminmod.com-unified.crt

cat COMODORSAAddTrustCA.crt COMODORSADomainValidationSecureServerCA.crt AddTrustExternalCARoot.crt > centminmod.com-trusted.crt
    from SSL - HTTPS as a Google ranking signal | Centmin Mod Community

     
  3. Sep 8, 2014 #3
    rdan

    rdan Well-Known Member

    5,439
    1,397
    113
    May 25, 2014
    Ratings:
    +2,186
    Local Time:
    10:42 PM
    Mainline
    10.2
    For trusted I thought:

    cat COMODORSADomainValidationSecureServerCA.crt COMODORSAAddTrustCA.crt AddTrustExternalCARoot.crt >> ssl-trusted.crt
     
  4. Sep 8, 2014 #4
    eva2000

    eva2000 Administrator Staff Member

    53,142
    12,108
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +18,643
    Local Time:
    12:42 AM
    Nginx 1.27.x
    MariaDB 10.x/11.4+
    Just use the order from post 2 above that's what I am using on this forum :D
     
Previous Thread Next Thread
Loading...

.