Shulou(Shulou.com)06/02 Report--

Find intermediate certificate

To ensure compatibility with all browsers, we must deploy intermediate certificates on Ali Cloud. If certificates are not deployed, although the installation process can be completely error-free, it may cause browsers such as Android system, Chrome and Firefox to fail to recognize it. Please go to the intermediate certificate download tool, enter your Server.cer, and then download the intermediate certificate. Please save the intermediate certificate as Chain.cer.

Server certificate and intermediate certificate connection

First of all, we need to add the intermediate certificate Chain.cer to the server certificate Server.cer file. Please copy and paste all the contents of Chain.cer into Server.cer in the following order: the first paragraph, server certificate; the second paragraph, intermediate certificate, as follows:

-BEGIN CERTIFICATE-MIIEsTCCA5mgAwIBAgIDBfoqMA0GCSqGSIb3DQEBCwUAMEcxCzAJBgNVBAYTAlVT. Server Certificate. T0hUGo/wiwTBUafyk1A+LlSUE+dYqzbHYV9Q4d83UIzz9vXO4wmSRgV0udjGN2GRW7oiGmI=-END CERTIFICATE-BEGIN CERTIFICATE-MIIEsTCCA5mgAwIBAgIDBfoqMA0GCSqGSIb3DQEBCwUAMEcxCzAJBgNVBAYTAlVT... Chain Certificate. T0hUGo/wiwTBUafyk1A+LlSUE+dYqzbHYV9Q4d83UIzz9vXO4wmSRgV0udjGN2GRW7oiGmI=-END CERTIFICATE-

Save the modified Server.cer in the previous step and prepare to upload it with KEY later.

Upload the certificate to Ali Yun

Click "load balance"-"Certificate Management"-"create Certificate"

"Certificate name" please set a logo that is easy to remember.

Certificate Type Select Server Certificate.

"Certificate content", please copy and paste all the Server.cer (including intermediate certificate) you just saved.

"Private key" please copy and paste the Server.key just now.

Certificate region Please select the region where you want to use the certificate. At present, if you need to use certificates in multiple regions, please upload them in multiple regions.

Deployment certificate

On the "load balance" menu, click "instance Management", select the instance that needs to deploy the certificate, and click "manage".

Select add snooping:

"Front end Protocol" Select "HTTPS": "443"

"backend protocol" can choose "443" or "80"

Server Certificate Select the server certificate you just uploaded.

Click next to complete the installation of the SSL certificate.

FAQ: why do some browsers recognize my certificate while others report an error?

First of all, make sure that you have completed the connection between the server certificate and the intermediate certificate. If there is no intermediate certificate in the uploaded server certificate, and some systems that cannot download the intermediate certificate automatically, the validity of the server certificate cannot be recognized.

Second, if you purchase certificates sold on our website, including Symantec, Geotrust and Rapidssl, all browsers and operating systems are supported, but if they are other CA products, please pay attention to contact the manufacturer for compatibility with these browsers.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.