Extract intermediate and Root certificate

10:59 PM

Save the CA signed certificate to a text file with a .cer extension. For example: signed-certificate.cer. Include the Begin Certificate and End Certificate lines when you save the file. For example:
---BEGIN CERTIFICATE---
MIIFPDCCBCSgAwIBAgIQdc/+38qo3f3bZwozWEiUVjANBgkqhkiG9w0BAQUFADCB
vDELMAkGA1UEBhMCVVMxFzAVBgNVBAoTDlZlcmlTaWduLCBJbmMuMR8wHQYDVQQL
DTE0MDcwNzAwMDAwMFoXDTE1MDcwODIzNTk1OVowejAYELMAkGA1UEBhMCVVMxEzAR
---END CERTIFICATE---
  1. Double-click on the new file that you created and a Certificate dialog box opens
  2. Click on the Certification Path tab.
  3. Look at the tree-like structure representing the full certificate chain. The top of the chain is referred to as the root Certificate Authority (CA). The bottom of the chain represents your server's certificate. If your server is not listed one-level below the root CA, then your certificate was issued by an intermediary CA. However, if your server is listed one-level below the root CA, then the certificate was issued by the root CA. For example, the following screen capture shows a certificate chain where an root CA, VeriSign, issued a certificate for support.vertafore.com

You must export the certificate from the chain; first let’s start with the Root Certificate.
  1. Select the top of the chain, double-click the server's certificate (i.e. server.cer) file and a Certificate dialog box opens.
a.Click Certification Path tab.
b.Highlight an entry of the certificate chain.

c.Click View Certificate.
d.In the Certificate dialog window, click the Details tab.
e.Click Copy to File...
f.In the Certificate Export Wizard that appears, click Next.
g.Select Base-64 encoded X.509 (.CER), and click Next.
h.Type in a unique name for the certificate you are exporting and click Next.
For example, "VS-root-CA".
i.Click Finish.
j.Click OK in the dialog box that displays the following message:  The export was successful.
k.Repeat the preceding sub steps for each intermediate certificate in the chain. Note that there is no need to repeat these steps for the bottom entry of the chain because the server’s certificate already exists.
Intermediate Certificate
  2.  Select the next entry in the chain, double-click the server's certificate (i.e. server.cer) file and a Certificate dialog box opens.
     a)   Click Certification Path tab.
     b)   Highlight an entry of the certificate chain.

 c)  Click View Certificate.
d)  In the Certificate dialog window, click the Details tab.
e)  Click Copy to File...
f)   In the Certificate Export Wizard that appears, click Next.
g)  Select Base-64 encoded X.509 (.CER), and click Next.
h)  Type in a unique name for the certificate you are exporting and click Next. For example, " VS-intermediary-CA".
i)   Click Finish.
j)   Click OK in the dialog box that displays the following message: The export was successful.
When you are done, you will have a certificate file (.cer) for each entry of the chain. In our example, there are three certificate files:
Certificate type Name Certificate file name
Root VeriSign VS-root-CA.cer
Intermediary VeriSign Class 3 International Server CA – G3 VS-intermediary-CA.cer
Server support.vertafore.com Support_vertafore.cer

You Might Also Like

0 comments

Contact Form

Name

Email *

Message *

Translate

Wikipedia

Search results