Here’s how to do it: How to create the CA Bundle? If you’ve received your root and intermediate certs as separate files, you should combine them into a single one to create the CA Bundle file. ca-bundle extension, all you have to do is upload it to your server in the relevant field. Download and extract its contents on your device. If your certificate is in the PKCS#7 format (appropriate mostly for IIS/Microsoft Exchange), the bundle is already included in your certificate and you do not need to install it separately.Īfter successfully applying for an SSL certificate, the CA will provide you with all the necessary installation files. You may receive your root and intermediate certificates as separate files. Not all Certificate Authorities will send you the CA Bundle file. Moreover, the certificates inside the CA Bundle must be in the correct order. To avoid this issue, you must import the right file. If an intermediate certificate is missing or isn’t configured correctly, browsers won’t recognize your certificate.Ī missing intermediate is one of the most common causes of SSL connection errors. The CA bundle is essential for older browser versions and obsolete systems. The chain is required to improve the compatibility of the certificates with web browsers, email clients, and mobile devices. Together with your server certificate (issued specifically for your domain), these files complete the SSL chain of trust. They either don’t know where to find the CA bundle or struggle to create it.ĬA Bundle is the file that contains root and intermediate certificates. Here’s where users usually encounter difficulties. When you install an SSL certificate, your server may ask to import a CA Bundle along with your primary certificate.
0 kommentar(er)
