# SSL Intermediate EV certificates

**URL:** <https://www.ruby-forum.com/t/ssl-intermediate-ev-certificates/145699>\
**Category:** NGINX\
**Created:** [August 13, 2008, 2:12am UTC](https://www.ruby-forum.com/t/ssl-intermediate-ev-certificates/145699 "2008-08-13T02:12:45Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![paul](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/p/bbe5ce/32.png) [@paul](https://www.ruby-forum.com/u/paul)\
**Post date:** [August 13, 2008, 2:12am UTC](https://www.ruby-forum.com/t/ssl-intermediate-ev-certificates/145699/1 "2008-08-13T02:12:45Z")

</div>

We have a cert, a key and an intermediate cert file with two certs  
inside…  
Where do these go? I don’t see any place for intermediate extended  
validation certs…

Thanks

---

<div class="post-metadata">

**Author:** ![paul](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/p/bbe5ce/32.png) [@paul](https://www.ruby-forum.com/u/paul)\
**Post date:** [August 13, 2008, 2:29am UTC](https://www.ruby-forum.com/t/ssl-intermediate-ev-certificates/145699/2 "2008-08-13T02:29:07Z")

</div>

Append the textual content of your intermediate certificate files onto  
the end of the files for your regular cert and it should work  
automatically.

---

<div class="post-metadata">

**Author:** ![paul](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/p/bbe5ce/32.png) [@paul](https://www.ruby-forum.com/u/paul)\
**Post date:** [August 13, 2008, 5:49am UTC](https://www.ruby-forum.com/t/ssl-intermediate-ev-certificates/145699/3 "2008-08-13T05:49:13Z")

</div>

I did this already expecting it to work I put it in the .pem file  
ssl\_certificate /usr/local/nginx/conf/blah.pem  
in the config, but it doesn’t work… 😕  
The pem file has the certificate at the top and the two EV certs below  
it so 3 total in the file.

---

<div class="post-metadata">

**Author:** ![paul](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/p/bbe5ce/32.png) [@paul](https://www.ruby-forum.com/u/paul)\
**Post date:** [August 13, 2008, 8:53am UTC](https://www.ruby-forum.com/t/ssl-intermediate-ev-certificates/145699/4 "2008-08-13T08:53:43Z")

</div>

On Tue, Aug 12, 2008 at 11:40:42PM -0400, Paul wrote:

> I did this already expecting it to work I put it in the .pem file  
> ssl\_certificate /usr/local/nginx/conf/blah.pem  
> in the config, but it doesn’t work… 😕  
> The pem file has the certificate at the top and the two EV certs below  
> it so 3 total in the file.

Do you see any cetificate error on startup time ?  
Or browsers do not want to accept the certificate ?

I think the order of cetificates in file should be:

1. your site sertificate
2. intermidiate CA cetificate signed by next certificate
3. intermidiate CA cetificate signed by some root CA builtin in browser

Could you post Issuer and Subject of two last certificates if they are  
public ?

You can do it using  
openssl x509 -noout -text -in

BTW, have you tried to disable SSL sessions in proxied HTTPS as I  
suggested ?

---

<div class="post-metadata">

**Author:** ![paul](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/p/bbe5ce/32.png) [@paul](https://www.ruby-forum.com/u/paul)\
**Post date:** [August 13, 2008, 5:50pm UTC](https://www.ruby-forum.com/t/ssl-intermediate-ev-certificates/145699/5 "2008-08-13T17:50:55Z")

</div>

Thanks Igor. Just following up here(info is in your e-mail) so the list  
can see it, the regular seems to work but the customer says intermediate  
cert isn’t working although the  
web site works fine and says it’s secure and there’s no issues with the  
browsers and no errors.

Paul