Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I've just generated a SSL certificate with go daddy and I've downloaded the files: gd_bundle.crt

I'm now going to combine them but it is not clear what's the 2nd certificate is.


share|improve this question
up vote 4 down vote accepted

It's several certificates grouped together, that all need to be installed to make sure the one you're trying to use is fully trusted.

share|improve this answer
Yes. To expand on this: your browser contains a few dozen self-signed CA certificates that it trusts. However, not all CAs use these certificates directly. Instead, they delegate their authority to an intermediate CA. That way, they don't have to use the root certificate on a daily basis, which reduces the chance of it getting compromised. If the intermediate CA gets compromised, or they just want to do a routine rotation, it's less of a big deal, because they can just revoke and issue a new one themselves without having to coordinate with browser vendors. – dfranke Nov 11 '10 at 18:54
However, since browsers don't already know about the intermediate CA, you need to send it to them along with your own site certificate. That's why you need gd_bundle.crt. – dfranke Nov 11 '10 at 18:55

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.