Godaddy SSL Certificate untrusted

If you deploy a Godaddy certificate using the online tutorial, the certificate is untrusted.

Browsers with strict review will block or require exceptions. The situation is as follows:

The Online Certificate Test Tool prompts that the content of the root certificate is empty. As a result, the certificate is untrusted.

The solution is as follows:

After the purchase is complete, download and unzip, there are two files in the directory, one is the certificate, the other gd_bundle-g2-g1.crt

Configure nginx now

ssl on;ssl_certificate /ssl_location/yourdomain.com.crt;ssl_certificate_key /ssl_location/yourdomain.com.key;

An error occurs when Firefox is used.

It is assumed that the certificate chain is broken.

Google, it is indeed the certificate chain is broken, you need to save the gd_bundle-g2-g1.crt and your own certificate as a file for the browser to climb the certificate chain. The method is as follows:

Cat yourdomain.com. CRT gd_bundle-g2.crt> yourdomain.com _ combined. CRT

Reconfigure nginx

ssl on;ssl_certificate /ssl_location/yourdomain.com_combined.crt;ssl_certificate_key /ssl_location/yourdomain.com.key;

Then test and pass the test.

The Apache configuration method is also found in the solution process, as follows: Apache supports the certificate chain bundle File

SSLEngine OnSSLCertificateFile /ssl_location/yourdomain.com.crtSSLCertificateKeyFile /ssl_location/yourdomain.com.keySSLCertificateChainFile /ssl_location/gd_bundle.crt

Godaddy SSL Certificate untrusted