Warnings in Qualys SSL Server Test - caused by long chain?

[griffin]

@kmconklin

A bit of a PITA though. If I don't do this though, try explaining the vulnerabilities flagged in the quarterly scan to the ISO 27001 auditor... It just suck we have so many servers running with let's encrypt certs...

Sounds to me like some auditors need some training. Just my 2¢.

They can start here:

Long (default) and Short (alternate) Certificate Chains Explained

I…