Shulou(Shulou.com)06/02 Report--

Some browsers may complain (complain) about a certificate signed by a well-known certificate authority, while other browsers may accept the certificate without issues. This occurs because the issuing authority has signed the server certificate using an intermediate certificate that is not present (appear) in the certificate base of well-known trusted (trust) certificate authorities which is distributed (publish) with a particular browser. In this case the authority provides a bundle of (bunch) chained certificates which should be concatenated (connection) to the signed server certificate. The server certificate must appear before the chained certificates in the combined file:

Explanation:

Some browsers may sometimes complain about certificates signed by well-known certificate authorities, but other browsers may accept changing certificates without causing any problems. The reason for this problem is that certification authorities have adopted "intermediate certificates" to

As a server authentication, but the intermediate certificate is not included in the trusted base certificate library issued by a well-known certification authority to a particular browser. The solution is for authoritative certification authorities to provide a series of "chained certificates"

These chain certificates are linked to sign server authentication. The server certificate must appear before "chained certificates" in the same certificate file.

Reference: http://lukejin.iteye.com/blog/587200

Actual use in production:

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.