Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Can someone help me understand how to verify that my SSL cert is installed properly (or troubleshoot why it isn't)?

I installed GoDaddy SSL certificate on my Apache server. Some users are still reporting issues (Some versions of IE say "This page cannot be displayed" with no further explanation), and openssl says that there is a 'self signed' certificate in the chain. Please note, this is not a self-signed cert. It is signed by GoDaddy. This article has a related answer that did not work:

Here are the steps I have taken:

Step 1: Generate a private key

openssl req -out CSR.csr -new -newkey rsa:2048 -nodes -keyout privateKey.key

Step 2: Go to GoDaddy and re-key by pasting CSR.csr.

Step 3: Install the crt and bundle file in Apache and restart.

// In <VirtualHost>
SSLEngine on
SSLProtocol -ALL +SSLv3 +TLSv1
SSLVerifyClient none
SSLCertificateFile      /path/to/
SSLCertificateKeyFile   /path/to/privateKey.key
SSLCertificateChainFile /path/to/

% apachectl restart

Step 4: Go to any one of several machines and fail to verify using openssl.

% openssl s_client -connect -showcerts -CApath /etc/ssl/certs

...lots of output, shows certs I installed...
Verify return code: 19 (self signed certificate in certificate chain)

Step 5: Go to online SSL validation services and receive mixed reports:

  • self-signed error
  • self-signed error
  • ok
  • similar error
share|improve this question
How did you solved this problem? i have exactly the same problem right now and i dont know what to do. – Fernando Santiago Jun 22 '15 at 20:00

If and complain about the certificate while say that things are fine, check your virtual hosts configuration. supports SNI while, and older versions of IE do not.

When SNI is not supported by the client, no server name will be available to the webserver which will then fallback to the first matching virtualhost. Perhaps you have another virtualhost for testing purposes that takes precedence over your main website.

The solution is to change this order or use a dedicated IP address for this host.

share|improve this answer
Aside, your domain seems to work now. – Lekensteyn Jul 26 '13 at 8:46

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.