How Do I Fix an Incomplete SSL Certificate Chain?

If the certificate provided by the certificate authority is not found in the built-in trust store on your platform and the certificate chain does not have a certificate authority, the certificate is incomplete. If you use the incomplete certificate to access the website corresponding to the protected domain name, the access will fail.

You can manually create a complete certificate chain to solve this problem. The latest Google Chrome version supports automatic verification of the trust chain. The following describes how to manually create a complete certificate chain:

1. Viewing the certificate. Click the padlock in the address bar to view the certificate status (see ).
2. Check the certificate chain. Click Certificate. Select the Certificate Path tab and then click the certificate name to view the certificate status.
3. Save the certificates to the local PC one by one.
   1. Select the certificate name and click the Details tab.
   2. Click Copy to File, and then click Next as prompted.
   3. Select Base-64 encoded X.509 (.CER) and click Next. Figure 1 shows an example.
      Figure 1 Certificate export wizard
      

4. Rebuild the certificate. After all certificates are exported to the local PC, open the certificate file in Notepad and rebuild the certificate according to the sequence shown in .
5. Upload the certificate again.