What is Intermediate CA for SSL

Posted on 2014-08-06
Last Modified: 2014-08-11
Hi Experts

I purchased a SSL from GoDaddy, and I have a server with a private company.

the company is asking me to provide the intermediate CA.  What is that and how do I get it? Is it a .ca file?

I think they tried some general intermediate CA's from Godaddy certificate store but they don't seems working.

What do I do?
Question by:APD_Toronto
    LVL 16

    Expert Comment

    by:Emmanuel Adebayo
    The intermediate certificate "chains" your SSL certificate to the root certificates.

    Ask Godaddy to send you their intermediate certificate, they might have changed the one that was installed on your server.

    Godaddy will provide this for you or you might have got it with the certificate they signed for you.
    LVL 33

    Accepted Solution

    Intermediate certificate is a CA certificate not in the browser root store, but signed by another valid CA - you can have quite a chain of them between you and a valid root.

    Easiest way to provide an intermediate CA cert is to simply drop the cert (just the cert, not the pfx) you have onto your windows machine as a .cer file then double-click it!

    once your machine has opened the certificate, there should be a "certification path" tab that shows all the certificates between you and a valid root. here is an example:

    Screenshot of Certification path
    select the intermediate (or if there is more than one, select each in turn) and click the [View Certificate] button.

    On the resulting Certificate details tab, there should be a "Copy to file" button. export the cert as a Base64 X509 (cer) - this is the intermediate the company wants (and yes, they could have done that too)

    Author Comment

    After I select the intermediate and clicked the "View Certificate" button, were is the "copy to file" button?
    LVL 33

    Expert Comment

    by:Dave Howe
    view certificate should give you a second popup with that intermediate certificate selected. on the "details" tab of that second popup should be the copy to file button :)

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    How your wiki can always stay up-to-date

    Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
    - Increase transparency
    - Onboard new hires faster
    - Access from mobile/offline

    We've all had that page pop up telling us there is a problem with the certificate and some of us continue on anyways and others run away to a safer competing site.  But what to do when you get the error - is it your problem or theirs?  What can you …
    So you need a certificate so you can offer SSL encryption.  But which one should you get?  There are so many choices out there! Here is a generic overview of the main types of SSL certificates sold by the majority of commercial Certification Auth…
    Need more eyes on your posted question? Go ahead and follow the quick steps in this video to learn how to Request Attention to your question. *Log into your Experts Exchange account *Find the question you want to Request Attention for *Go to the e…
    To add imagery to an HTML email signature, you have two options available to you. You can either add a logo/image by embedding it directly into the signature or hosting it externally and linking to it. The vast majority of email clients display l…

    759 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    13 Experts available now in Live!

    Get 1:1 Help Now