# PositiveSSL certificate keeps giving the untrusted issuer warnings in browser **URL:** \ **Category:** NGINX\ **Created:** [September 5, 2011, 1:47am UTC](https://www.ruby-forum.com/t/positivessl-certificate-keeps-giving-the-untrusted-issuer-warnings-in-browser/211465 "2011-09-05T01:47:26Z")\ **Posts on this page:** 4\ **Page:** 1
**Author:** ![luislavena](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/l/0ea827/32.png) [@luislavena](https://www.ruby-forum.com/u/luislavena)\ **Post date:** [September 5, 2011, 1:47am UTC](https://www.ruby-forum.com/t/positivessl-certificate-keeps-giving-the-untrusted-issuer-warnings-in-browser/211465/1 "2011-09-05T01:47:26Z")
Since I’m working on a Facebook app, the self-signed certificate I created for SSL access to my admin area is no longer useful. I grabbed a PositiveSSL cert from Comodo, but after following the instructions here ( [Using Namecheap’s Free SSL with Nginx » KBeezie](http://kbeezie.com/view/free-ssl-with-nginx/2/) ) but still get the untrusted or self-signed warnings. This page ([http://www.digicert.com/ssl-certificate-installation-nginx.htm](http://www.digicert.com/ssl-certificate-installation-nginx.htm)) seems to suggest I have to concatenate several crt files together. This is what Comodo sent me: AddTrustExternalCARoot.crt PositiveSSLCA.crt UTNAddTrustServerCA.crt and www\_example\_com.crt Do I need to concatenate all of these? Also, just curious why do some example sites I’ve seen say Ngix needs a pem file and others say a crt? Thanks! ---
**Author:** ![peterpiper](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/p/3e96dc/32.png) [@peterpiper](https://www.ruby-forum.com/u/peterpiper)\ **Post date:** [September 5, 2011, 2:04am UTC](https://www.ruby-forum.com/t/positivessl-certificate-keeps-giving-the-untrusted-issuer-warnings-in-browser/211465/2 "2011-09-05T02:04:42Z")
On 04/09/2011 7:46 PM, Ian E. wrote: > Since I’m working on a Facebook app, the self-signed certificate I > created for SSL access to my admin area is no longer useful. > > I grabbed a PositiveSSL cert from Comodo, but after following the > instructions here ( [http://kbeezie.com/view/free-ssl-with-nginx/2/](http://kbeezie.com/view/free-ssl-with-nginx/2/) ) but > still get the untrusted or self-signed warnings. Upon further testing I see that it’s still using the old cert despite issuing a kill -HUP. How do I get nginx to start using the new cert? ---
**Author:** ![peterpiper](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/p/3e96dc/32.png) [@peterpiper](https://www.ruby-forum.com/u/peterpiper)\ **Post date:** [September 5, 2011, 3:06am UTC](https://www.ruby-forum.com/t/positivessl-certificate-keeps-giving-the-untrusted-issuer-warnings-in-browser/211465/3 "2011-09-05T03:06:58Z")
On 04/09/2011 8:04 PM, Ian E. wrote: > Upon further testing I see that it’s still using the old cert despite > issuing a kill -HUP. Sigh…okay, never mind. Seems I had one typo in the conf change so the kill -HUP was still using the old conf. So it’s working okay now. Still curious why some examples use pem and others use crt. Also any best usage additions I should add to the ssl section? ---
**Author:** ![peterpiper](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/p/3e96dc/32.png) [@peterpiper](https://www.ruby-forum.com/u/peterpiper)\ **Post date:** [September 5, 2011, 6:55am UTC](https://www.ruby-forum.com/t/positivessl-certificate-keeps-giving-the-untrusted-issuer-warnings-in-browser/211465/4 "2011-09-05T06:55:36Z")
On Sun, Sep 04, 2011 at 09:06:07PM -0400, Ian E. wrote: > On 04/09/2011 8:04 PM, Ian E. wrote: > > > Upon further testing I see that it’s still using the old cert despite > > issuing a kill -HUP. > > Sigh…okay, never mind. Seems I had one typo in the conf change so the > kill -HUP was still using the old conf. So it’s working okay now. > > Still curious why some examples use pem and others use crt. This is just a file extention. Both use the same PEM formay inside. > Also any best usage additions I should add to the ssl section? Please read this: > **[Configuring HTTPS servers](http://nginx.org/en/docs/http/configuring_https_servers.html)** – Igor S.