StartSSL class 1 certificate not accepted by browser (Weblogic 10.0.1)

Steven Devijver picture Steven Devijver · Jun 4, 2012 · Viewed 25.8k times · Source

I have requested a class 1 certificate from StartSSL and installed it in Weblogic 10.0.1 (see screenshots).

WLS keystore config WLS SSL config

The browsers (Chrome & IE9 on Windows 7, IE8 on XPSP3) still give a certificate error (see screenshots).

certificate error 1 certificate error 2

I think the StartSSL root certificate is available in several browsers (see here). Please advise.

Answer

TobiX picture TobiX · Jun 4, 2012

StartSSL Class 1 certificates are signed by a intermediate CA, which is signed by the StartCom Root CA. For your browser to trust this certificate, it needs to know the trust chain up to the Root CA it already knows.

Your server needs to send the complete trust chain to the browser (minus the Root CA), so your browser can verify that your certificate is trusted.

See the StartSSL FAQ for more info.