Openssl verification fails for Letsencrypt issued certificate

openssl verify -purpose sslserver -untrusted chain.pem cert.pem

or

openssl verify -purpose sslserver -untrusted chain_1.pem -untrusted chain_0.pem cert.pem

in which you split the chain file into chain_0 and chain_1, then pass them into verify in reverse order.

(both verified to work on your cert+chain, even on older installs)

6 Likes