I've installed a new SSL certificate using SHA1 hashing. Im user a security certificate by GeoTrust SSL CA – G2 but With WebServices communications I'm getting a PKIX error.
The follow page:
https://www.geocerts.com/ssl_checker
It's getting me the next message:
Certificate Chain Complete?
A valid Root CA Certificate could not be located, the certificate will likely display
browser warnings.
I hope someone can help me.
Best Answer
This because you don't have a Chain file in your web server for ssl
To creating a chain file you have to cat every .crt files and redirect it to create a new -bundle.crt
here is the example, There are 3 file what i got from Certificate Authority
cat the files and direct it into one new file named as -bunle
Here you can see the output of above command, there is a new file STAR_nydomain_com-bundle.crt
Change the Entry for SSL in apache confi or nginx confi as below
Restart the web server (Apache or nginx)
This will fix your chain file issue.
This is the result if it's work good, chain result will be continue to 4 steps like below image