# Where is the domain certificate and the intermediate certificates

**URL:** <https://community.letsencrypt.org/t/where-is-the-domain-certificate-and-the-intermediate-certificates/25556>\
**Category:** Help\
**Created:** [January 12, 2017, 12:50pm UTC](https://community.letsencrypt.org/t/where-is-the-domain-certificate-and-the-intermediate-certificates/25556 "2017-01-12T12:50:45Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![podnebesnyi.ruslan](https://avatars.discourse-cdn.com/v4/letter/p/a6a055/32.png) [@podnebesnyi.ruslan](https://community.letsencrypt.org/u/podnebesnyi.ruslan)\
**Post date:** [January 12, 2017, 12:50pm UTC](https://community.letsencrypt.org/t/where-is-the-domain-certificate-and-the-intermediate-certificates/25556/1 "2017-01-12T12:50:45Z")

</div>

Hello!

- I have installed cms 1c-bitrix. To install an ssl certificate I need in the file /etc/nginx/ssl/cert.pem add - First private key, and then the domain certificate, then intermediate (intermediate) certificates.

- I installed it on the server, the client Let’s Encrypt and created SSL certificates. MANUAL - [https://кодер.укр/записи/let-s-encrypt-бесплатный-ssl-сертификат-и-https-протокол-на-сайт](https://xn--d1acnqm.xn--j1amh/%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B8/let-s-encrypt-%D0%B1%D0%B5%D1%81%D0%BF%D0%BB%D0%B0%D1%82%D0%BD%D1%8B%D0%B9-ssl-%D1%81%D0%B5%D1%80%D1%82%D0%B8%D1%84%D0%B8%D0%BA%D0%B0%D1%82-%D0%B8-https-%D0%BF%D1%80%D0%BE%D1%82%D0%BE%D0%BA%D0%BE%D0%BB-%D0%BD%D0%B0-%D1%81%D0%B0%D0%B9%D1%82) . I found the private key in /etc/letsencrypt/live/marketkeys.EN/privkey.pem.

- Please tell me where I can get a domain certificate and intermediate (intermediate) certificates.

Sincerely, Ruslan Podnebesnyi

---

<div class="post-metadata">

**Author:** ![Osiris](https://avatars.discourse-cdn.com/v4/letter/o/839c29/32.png) [@Osiris](https://community.letsencrypt.org/u/Osiris)\
**Post date:** [January 12, 2017, 12:52pm UTC](https://community.letsencrypt.org/t/where-is-the-domain-certificate-and-the-intermediate-certificates/25556/2 "2017-01-12T12:52:47Z")

</div>

In the same directory as `privkey.pem`. `cert.pem` is, no shocker here, your certificate, `chain.pem` is the intermediate cert and `fullchain.pem` is `cert.pem` and `chain.pem` combined in one file.

---

<div class="post-metadata">

**Author:** ![schoen](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/schoen/32/79_2.png) [@schoen](https://community.letsencrypt.org/u/schoen)\
**Post date:** [January 12, 2017, 10:48pm UTC](https://community.letsencrypt.org/t/where-is-the-domain-certificate-and-the-intermediate-certificates/25556/3 "2017-01-12T22:48:11Z")

</div>

It is a good idea to configure your software to use the version in `live` instead of making a copy. That’s because you’ll need to renew the certificate within three months. When you do, the `live` version will be updated with the renewed certificate and associated information (including a new private key!). However, if you make a copy elsewhere, that copy won’t be automatically updated during renewal.

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/letsencrypt/original/3X/c/a/ca6c06ea1ea201324bba7048c6841ce60236468d.png) [@system](https://community.letsencrypt.org/u/system)\
**Post date:** [February 11, 2017, 11:03pm UTC](https://community.letsencrypt.org/t/where-is-the-domain-certificate-and-the-intermediate-certificates/25556/4 "2017-02-11T23:03:05Z")

</div>

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.