Why are there two certificates in my *.crt file?

This is just a basic certsage question: Why is there a "top" and "bottom" certificate in the certsage file, "certificate.crt" ?? There are two certificates in the file, not just one.

1 Like

Welcome to the Let's Encrypt Community! :slightly_smiling_face:

The bottom certificate is the CA intermediate from Let's Encrypt (R10 or R11).

https://letsencrypt.org/certs/2024/r10.pem

https://letsencrypt.org/certs/2024/r11.pem

5 Likes

Thank you. I use the top certificate on the website. I looked in the documentation but couldn't find the information on this question.

2 Likes

You need to use both certificates, but it's possible that your webservice (e.g. cPanel) may supply the intermediate for you from its own repo/cache. As long as your server is serving both certificates in the .crt file to your clients, you should be good. The second certificate will be an exact copy of either R10 or R11. You can download copies of both to compare against your second certificate via the links I provided above.

5 Likes

Thank you @griffin Since you said "CA" I was able to find this in the documentation. I'll look at it more closely. Chains of Trust - Let's Encrypt

4 Likes

I pulled my links from that very page. :slightly_smiling_face:

Happy to help.

4 Likes

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.