Tell me more ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.
up vote 2 down vote favorite

I've just generated a SSL certificate with go daddy and I've downloaded the files:

mydomain.com.crt gd_bundle.crt

I'm now going to combine them but it is not clear what's the 2nd certificate is.

Thanks

share|improve this question

1 Answer

up vote 3 down vote accepted

It's several certificates grouped together, that all need to be installed to make sure the one you're trying to use is fully trusted.

share|improve this answer
4  
Yes. To expand on this: your browser contains a few dozen self-signed CA certificates that it trusts. However, not all CAs use these certificates directly. Instead, they delegate their authority to an intermediate CA. That way, they don't have to use the root certificate on a daily basis, which reduces the chance of it getting compromised. If the intermediate CA gets compromised, or they just want to do a routine rotation, it's less of a big deal, because they can just revoke and issue a new one themselves without having to coordinate with browser vendors. – dfranke Nov 11 '10 at 18:54
2  
However, since browsers don't already know about the intermediate CA, you need to send it to them along with your own site certificate. That's why you need gd_bundle.crt. – dfranke Nov 11 '10 at 18:55

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.