Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Listed below is an example from an Apache virtual host file. I was curious if there was a particular order that the SSLCertificate, SSLCertificateKeyFile, and the SSLCACertificateFile should be in? Should the intermediate certificate file from the CA be listed first? Is there a hierarchy to how these are processed? The CA intermediate file is needed in this case to support the 2048 bit SSL certificate that is being used.

SSLEngine ON
SSLOptions +StrictRequire
SSLCertificateFile /path/to/file.crt
SSLCertificateKeyFile /path/to/file.key
SSLCACertificateFile /path/to/intermediate-ca-file.crt
share|improve this question
up vote 1 down vote accepted

No, the ordering of SSLCACertificateFile entries within the .conf file does not matter because the trust chain that is followed is taken from the certificates them self and assembled during the loading of the HTTPDs

share|improve this answer
@user7918: Thanks for the information and the update. I was worried that it might create some problem by having it listed last. – John Nov 19 '10 at 17:02

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.