# Client certificates from multiple CAs **URL:** \ **Category:** NGINX\ **Created:** [October 24, 2011, 12:45pm UTC](https://www.ruby-forum.com/t/client-certificates-from-multiple-cas/213118 "2011-10-24T12:45:51Z")\ **Posts on this page:** 2\ **Page:** 1
**Author:** ![dubstep](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/d/cdc98d/32.png) [@dubstep](https://www.ruby-forum.com/u/dubstep)\ **Post date:** [October 24, 2011, 12:45pm UTC](https://www.ruby-forum.com/t/client-certificates-from-multiple-cas/213118/1 "2011-10-24T12:45:51Z")
Is it possible to configure nginx to perform client certificate validation when the client certificates are generated by different CAs? I’ve seen that it’s rather easy when the client certificates are generated by only one (using the directive: ssl\_client\_certificate), but I cannot assure that all the certificates will be generated by only one CA. Any suggestion? Thanks, Jaime Posted at Nginx Forum: > **[Client certificates from multiple CAs](https://forum.nginx.org/read.php?2,217172,217172#msg-217172)** > > Is it possible to configure nginx to perform client certificate validation when the client certificates are generated by different CAs? I've seen that it's rather easy when the client certificates are generated by only one (using the directive:... ---
**Author:** ![jjjaime](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/j/2acd7d/32.png) [@jjjaime](https://www.ruby-forum.com/u/jjjaime)\ **Post date:** [October 24, 2011, 5:33pm UTC](https://www.ruby-forum.com/t/client-certificates-from-multiple-cas/213118/2 "2011-10-24T17:33:39Z")
2011/10/24 jjjaime [removed\_email\_address@domain.invalid](mailto:removed_email_address@domain.invalid): > Is it possible to configure nginx to perform client certificate > validation when the client certificates are generated by different CAs? > I’ve seen that it’s rather easy when the client certificates are > generated by only one (using the directive: ssl\_client\_certificate), but > I cannot assure that all the certificates will be generated by only one > CA. > Any suggestion? I would try to concatenate all the CA roots in a single file… – Lucas Clemente Vella [removed\_email\_address@domain.invalid](mailto:removed_email_address@domain.invalid)