Create a PEM Certificate Bundle
Create a PEM certificate bundle by concatenating the PEM encoded certificates for all of the intermediate CAs into a single file.
The certificates must be ordered in the file such that each certificate was issued by the CA whose certificate comes next in the file.
• The certificate for the CA that issued the server certificate must appear first in the file.
• The last certificate in the file must be issued by the root CA.
• The certificate for the root CA must not appear in the file.
• If your certificate chain of trust only includes a single intermediate CA, then the certificate bundle file only includes the certificate for this single intermediate CA.
For example, assume that you have the following certificates:
• Certificate A belonging to “Intermediate-A CA” and issued by the Root CA
• Certificate B belonging to “Intermediate-B CA” and issued by Intermediate-A CA
• Certificate C used for the Experience Service and issued by “Intermediate-B CA”
In this case, the certificates would appear in the following order:
• Certificate B
• Certificate A