# Untrusted website - Intermediate certificate needed? **URL:** \ **Category:** Help\ **Created:** [September 6, 2021, 11:19am UTC](https://community.letsencrypt.org/t/untrusted-website-intermediate-certificate-needed/159285 "2021-09-06T11:19:54Z")\ **Posts on this page:** 7\ **Page:** 1
**Author:** ![Paradoks-Studio](https://avatars.discourse-cdn.com/v4/letter/p/a183cd/32.png) [@Paradoks-Studio](https://community.letsencrypt.org/u/Paradoks-Studio)\ **Post date:** [September 6, 2021, 11:19am UTC](https://community.letsencrypt.org/t/untrusted-website-intermediate-certificate-needed/159285/1 "2021-09-06T11:19:54Z")
Hello, I run this website: [www.adversator.com](https://www.adversator.com) Everything works well. I tried to integrate a shop in it. Paypal: Was not able to make the Webhooks or IPN works. Stripe: Didn't even accept my website adress: "SSL certificate is not valid" So i tested this: [https://www.sslshopper.com/ssl-checker.html?hostname=www.adversator.com](https://www.sslshopper.com/ssl-checker.html?hostname=www.adversator.com) here they say: ### The certificate is not trusted in all web browsers. You may need to install an Intermediate/chain certificate to link it to a trusted root certificate. [Learn more about this error](https://www.sslshopper.com/ssl-certificate-not-trusted-error.html). The fastest way to fix this problem is to contact your SSL provider. At this point i don't know what to do, should i do something with certbot or get an intermediate certificate somewhere ? Thanks ---
**Author:** ![danb35](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/danb35/32/70869_2.png) [@danb35](https://community.letsencrypt.org/u/danb35)\ **Post date:** [September 6, 2021, 11:39am UTC](https://community.letsencrypt.org/t/untrusted-website-intermediate-certificate-needed/159285/2 "2021-09-06T11:39:28Z")
> [@Paradoks-Studio](#): > > At this point i don't know what to do Since you gave us no information about how you got or installed the certificate, neither do we. But the test you did was correct; your site is not serving the intermediate signing certificate. You don't need to do anything with certbot to get it (you already have it), but you do need to tell your web server to use it. Depending on your web server and version, this could mean using `fullchain.pem` rather than `cert.pem`, or using `chain.pem` in addition to `cert.pem`. ---
**Author:** ![Paradoks-Studio](https://avatars.discourse-cdn.com/v4/letter/p/a183cd/32.png) [@Paradoks-Studio](https://community.letsencrypt.org/u/Paradoks-Studio)\ **Post date:** [September 6, 2021, 12:31pm UTC](https://community.letsencrypt.org/t/untrusted-website-intermediate-certificate-needed/159285/3 "2021-09-06T12:31:30Z")
> how you got or installed the certificate I got it with :certbot certonly --standalone --preferred-challenges I don't know what you mean by installed, but as i use apache i made two lines in my conf file like that: ``` SSLCertificateFile /mySite/cert.crt SSLCertificateKeyFile /mySite/privkey.key ``` That's all i do to make it work if i remember well. Did i miss something with the install part ? I don't understand what you mean by : > but you do need to tell your web server to use it ---
**Author:** ![danb35](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/danb35/32/70869_2.png) [@danb35](https://community.letsencrypt.org/u/danb35)\ **Post date:** [September 6, 2021, 12:38pm UTC](https://community.letsencrypt.org/t/untrusted-website-intermediate-certificate-needed/159285/4 "2021-09-06T12:38:14Z")
> [@Paradoks-Studio](#): > > That's all i do to make it work if i remember well. Clearly you don't remember well, or you wouldn't be having this problem. Once again (for the third time now, since SSLShopper already told you this), your site needs to serve the intermediate signing certificate, which you already have in the `chain.pem` file. Consult the docs for your version of Apache to find how to do that. ---
**Author:** ![Paradoks-Studio](https://avatars.discourse-cdn.com/v4/letter/p/a183cd/32.png) [@Paradoks-Studio](https://community.letsencrypt.org/u/Paradoks-Studio)\ **Post date:** [September 6, 2021, 1:04pm UTC](https://community.letsencrypt.org/t/untrusted-website-intermediate-certificate-needed/159285/5 "2021-09-06T13:04:11Z")
changed : cert.crt and privkey.key to fullchain.pem privkey.pem Look like it works. Thanks @danb35 ---
**Author:** ![griffin](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/griffin/32/50204_2.png) [@griffin](https://community.letsencrypt.org/u/griffin)\ **Post date:** [September 6, 2021, 5:13pm UTC](https://community.letsencrypt.org/t/untrusted-website-intermediate-certificate-needed/159285/6 "2021-09-06T17:13:21Z")
@Paradoks-Studio I can confirm that you have implemented the correct solution given that your Apache version is at least 2.4.8. From [mod\_ssl - Apache HTTP Server Version 2.4](https://httpd.apache.org/docs/current/mod/mod_ssl.html#sslcertificatefile) : > SSLCertificateFile Directive > ... > The files may also include intermediate CA certificates, sorted from leaf to root. This is supported with version 2.4.8 and later, and obsoletes [SSLCertificateChainFile](https://httpd.apache.org/docs/current/mod/mod_ssl.html#sslcertificatechainfile). * * * The file extensions are technically irrelevant though some webservers might take them as cues about the format of the contents. ---
**Author:** ![system](https://global.discourse-cdn.com/letsencrypt/original/3X/c/a/ca6c06ea1ea201324bba7048c6841ce60236468d.png) [@system](https://community.letsencrypt.org/u/system)\ **Post date:** [October 6, 2021, 5:13pm UTC](https://community.letsencrypt.org/t/untrusted-website-intermediate-certificate-needed/159285/7 "2021-10-06T17:13:26Z")
This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.