Skip to Content

When trying to import the certificate response into the SSL server Standard PSE (or another PSE), an error might happen, informing that the “Verification of Certificate chain failed”.

It is possible that a wrong intermediate and/or root certificate is being used.

This post will show how to extract the intermediate and the root certificates using the Windows Crypto Shell Extension.

First step


Double click the certificate response file (<filename>.cer):

/wp-content/uploads/2015/07/1_742876.jpg

Go to “Certification Path” (third tab):

/wp-content/uploads/2015/07/2_742925.jpg

Double click in the intermediate certificate (a new popup will be displayed):

/wp-content/uploads/2015/07/3_742926.jpg

Click in “Details” (second tab):

/wp-content/uploads/2015/07/4_742927.jpg

Click in “Copy to File…” to start a wizard. Select “Base-64 encoded X.509 (.CER)” to export the file.

Next step

Repeat the first step for the root certificate

Now it is possible to combine:

certificate response +

intermediate certificate +

root certificate

and paste them into the dialog box:

/wp-content/uploads/2015/07/6_742946.jpg

displayed after clicking in the “Import Cert. Response” button (“Own Certificate” section of the PSE):

/wp-content/uploads/2015/07/5_742947.jpg

To report this post you need to login first.

Be the first to leave a comment

You must be Logged on to comment or reply to a post.

Leave a Reply