# SSL certificate not trust in all web browser

**URL:** <https://community.letsencrypt.org/t/ssl-certificate-not-trust-in-all-web-browser/38296>\
**Category:** Help\
**Created:** [July 17, 2017, 5:20pm UTC](https://community.letsencrypt.org/t/ssl-certificate-not-trust-in-all-web-browser/38296 "2017-07-17T17:20:45Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![NonLinearNygma](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/nonlinearnygma/32/14891_2.png) [@NonLinearNygma](https://community.letsencrypt.org/u/NonLinearNygma)\
**Post date:** [July 17, 2017, 5:20pm UTC](https://community.letsencrypt.org/t/ssl-certificate-not-trust-in-all-web-browser/38296/1 "2017-07-17T17:20:45Z")

</div>

So I recently added ssl to my wordpress site using certbot from letsencrypt. I use a popular plugin jetpack for my wordpress site which offers features by connecting to their platform ([wordpress.com](http://wordpress.com))  
However, after the ssl certificates were added, it seemed not to work. The error was  
cURL error 60: SSL certificate problem: unable to get local issuer certificate

After running ssl checker I found this out  
[https://www.sslshopper.com/ssl-checker.html#hostname=numbersandreality.com](https://www.sslshopper.com/ssl-checker.html#hostname=numbersandreality.com)  
Any idea what might be causing the issue.  
Thanks

---

<div class="post-metadata">

**Author:** ![schoen](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/schoen/32/79_2.png) [@schoen](https://community.letsencrypt.org/u/schoen)\
**Post date:** [July 17, 2017, 5:38pm UTC](https://community.letsencrypt.org/t/ssl-certificate-not-trust-in-all-web-browser/38296/2 "2017-07-17T17:38:43Z")

</div>

Hi @NonLinearNygma,

The diagnosis on that site is correct:

> You may need to install an Intermediate/chain certificate to link it to a trusted root certificate.

The further explanation that they give is also correct.

If you didn't configure the certificate yourself but allowed the plugin to do it for you, then that plugin has a bug because it's not configuring the certificate properly.

If you did configure the certificate yourself, please let us know how you did it and what steps you followed, and we should be able to point out the point at which you missed the required intermediate certificate.

---

<div class="post-metadata">

**Author:** ![NonLinearNygma](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/nonlinearnygma/32/14891_2.png) [@NonLinearNygma](https://community.letsencrypt.org/u/NonLinearNygma)\
**Post date:** [July 17, 2017, 5:58pm UTC](https://community.letsencrypt.org/t/ssl-certificate-not-trust-in-all-web-browser/38296/3 "2017-07-17T17:58:19Z")

</div>

Can you please tell me how to do that?  
In my httpd-ssl.conf I have added the appropriate paths for  
SSLCertificateFile pointing to cert.pem  
SSLCertificateKeyFile pointing to privkey.pem

However, I haven’t set

1. SSLCAcertificatePath
2. SSLCARevocationPath
3. SSLCARevocationFile
4. SSLCARevocationCheck chain

Also in my live directory the following files were added (by certbot) which I have not yet used: fullchain.pem chaim.pem

---

<div class="post-metadata">

**Author:** ![NonLinearNygma](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/nonlinearnygma/32/14891_2.png) [@NonLinearNygma](https://community.letsencrypt.org/u/NonLinearNygma)\
**Post date:** [July 17, 2017, 6:58pm UTC](https://community.letsencrypt.org/t/ssl-certificate-not-trust-in-all-web-browser/38296/4 "2017-07-17T18:58:33Z")

</div>

I went through the attached README file and figured out where I was wrong.  
Thanks, I needed to configure the intermediate certificate properly.

---

<div class="post-metadata">

**Author:** ![schoen](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/schoen/32/79_2.png) [@schoen](https://community.letsencrypt.org/u/schoen)\
**Post date:** [July 17, 2017, 7:19pm UTC](https://community.letsencrypt.org/t/ssl-certificate-not-trust-in-all-web-browser/38296/5 "2017-07-17T19:19:38Z")

</div>

Nice work, I’m glad you got it figured out!

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/letsencrypt/original/3X/c/a/ca6c06ea1ea201324bba7048c6841ce60236468d.png) [@system](https://community.letsencrypt.org/u/system)\
**Post date:** [August 16, 2017, 7:19pm UTC](https://community.letsencrypt.org/t/ssl-certificate-not-trust-in-all-web-browser/38296/6 "2017-08-16T19:19:47Z")

</div>

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.