# My cert is missing Root 1

**URL:** https://community.letsencrypt.org/t/my-cert-is-missing-root-1/30309
**Category:** Help
**Created:** [March 21, 2017, 2:29pm UTC](https://community.letsencrypt.org/t/my-cert-is-missing-root-1/30309 "2017-03-21T14:29:44Z")
**Posts on this page:** 1
**Showing post:** 17

<div class="post-metadata">

### Author: ![Osiris](https://avatars.discourse-cdn.com/v4/letter/o/839c29/32.png) [@Osiris](https://community.letsencrypt.org/u/Osiris)
#### Post date: [March 21, 2017, 4:53pm UTC](https://community.letsencrypt.org/t/my-cert-is-missing-root-1/30309/17 "2017-03-21T16:53:22Z")

</div>

> [@thomas2411](#):
>
> @MitchellK, @tialaramex so should I change to SSLCertificateChainFile everywhere? I mean in all domains I use Let's Encrypt on?

[SSLCACertificateFile](http://httpd.apache.org/docs/current/mod/mod_ssl.html#sslcacertificatefile) is for _ **client authentication** _, so unless you're issuing client certificates to your users so they can access certain parts of your website like it is [described here](https://httpd.apache.org/docs/2.4/ssl/ssl_howto.html#accesscontrol), you shouldn't use that directive.

The [SSLCertificateChainFile](http://httpd.apache.org/docs/current/mod/mod_ssl.html#sslcertificatechainfile) directive is _deprecated_ since Apache version 2.4.8. So unless you're using an Apache older than that (i.e., 2.2 or 2.4.7 or older), you should use what is called a "bundle" file: the end user certificate as wel as the intermediate certificate in one file. The client `certbot` offers this bundle through the file `fullchain.pem`. This bundle should be used in [SSLCertificateFile](http://httpd.apache.org/docs/current/mod/mod_ssl.html#sslcertificatefile). Of course, for all the older Apaches you should just keep using `SSLCertificateChainFile`.

---

_[View the full topic](https://community.letsencrypt.org/t/my-cert-is-missing-root-1/30309)._