My site has a B rating because of certificate "chain issues"

Help
1

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. crt.sh | example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is: mysoccerleague.com

I ran this command: SSL Server Test: mysoccerleague.com (Powered by Qualys SSL Labs)

It produced this output: This server's certificate chain is incomplete. Grade capped to B.

My web server is (include version): Tomcat 8.5.24.0

The operating system my web server runs on is (include version): AlmaLinux release 9.6

My hosting provider, if applicable, is: eApps

I can login to a root shell on my machine (yes or no, or I don't know): yes

I'm using a control panel to manage my site (no, or provide the name and version of the control panel): no

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot): It doesn't appear to be installed.

2

your server doesn't send intermediate certificate.

Looks like you need to tweak your apache config.

check if "SSLCertificateFile" only contains the signed cert or signed cert and intermediate certs

    SSLCertificateFile      /path/to/signed_cert_and_intermediate_certs
    SSLCertificateKeyFile   /path/to/private_key

image
image934×439 17.9 KB

3

For certbot etc this generally means you want to point to the "fullchain" file, not the "cert" file.