Get the Fullchain certificate with CRT file

You might need the crs file, you might generate one with the following command.

openssl req -nodes -newkey rsa:2048 -sha256 -keyout myserver.key -out server.csr -utf8

You want to download the intermediate certificate : GandiStandardSSLCA2.pem
TO obtain the fullchain, you have to concatanate the crt with the intermediate.

cat mydomain.com.crt GandiStandardSSLCA2.pem > fullchain.pem

You might check if the crt file correspond to the .key file with the following command.

$ openssl x509 -noout -modulus -in mydomain.crt| openssl md5
MD5(stdin)= 11b598f22723c3c51582693e66ed1e82

$ openssl rsa -noout -modulus -in myserver.key | openssl md5
MD5(stdin)= 11b598f22723c3c51582693e66ed1e82

Hope it can help.

• Next: Software industry Dress Code - Maybe is time to change
• Previous: Search Words with Google Cloud Logs Explorer