8

We have a GlobalSign Domain certificate for our domain. I've installed the certificate into IIS and added the GlobalSign Domain Intermediate certificate to the Intermediate certification authorities for the local computer

It seems that IIS is not sending through the intermediate certificate (causing an error in firefox), just the domain certificate. I've verified this with OpenSSL and also various websites including GlobalSign's own health checker.

Looking In IIS, I can follow through the chain and each certificate is "ok", without the option to install any indicating they already are.

Any ideas on what may be wrong?

1 Answer 1

9

Finally managed to find a solution. For some reason, It must not of bound correctly in IIS. Removing and rebinding the certificate in IIS fixed the issue.

2
  • 4
    It's even easier: no need to remove the current binding or whatsoever. In IIS: 1) go to bindings 2) select https binding 3) "edit" 4) click "ok" button. Repeat for every https binding - so no need to remove the current certificate or something like that. The intermediate certificates can be checked on Windows with "DigiCert® Certificate Utility for Windows" digicert.com/util
    – Julian
    Dec 30, 2013 at 11:05
  • Julian's technique above showed me that the server was actually missing the intermediate certificate; once that was installed, still had to follow Julian's steps above, and the issue was resolved.
    – zimdanen
    Jun 19, 2014 at 16:13

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .