Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I read this bug report about RapidSSL certificates not being recognised by older versions of Android. I've got the necessary certificate chain from here, but I don't have an Android device to test on.

So how can I test if the certificate is set up properly?

share|improve this question
Trivial answer it might be, but if you put the URL into your question, those of us with Android devices could test it, and let you know. There's no test suite like reality! – MadHatter Nov 7 '12 at 10:05

The bug report linked to states that:

Android has always included the root CA

subject= /C=US/O=Equifax/OU=Equifax Secure Certificate Authority

So to ensure that it works across the board, you can check using the older Equifax certificate which has been recognised by browsers for longer. The command (on Ubuntu at least) is:

gnutls-cli --x509cafile /etc/ssl/certs/Equifax_Secure_CA.pem -p 443
share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.