Friday, February 25, 2011

the issuer of this certificate cannot be found Certificate cannot be verified up to a trusted certification authority

SkyHi @ Friday, February 25, 2011
ERROR:
After migrate(export and import http://shebangme.blogspot.com/2011/02/move-or-copy-ssl-certificate-from.html) ssl from Windows Server 2003 IIS to a new IIS server, the following 2 errors appears:
  • the issuer of this certificate cannot be found
  • Certificate cannot be verified up to a trusted certification authority?
   

SOLUTION:      (talk to thawte tech support)
 Install the thawte Intermediate CA file

Step 2 - Download the thawte Intermediate CA file for your SSL product type:
Note: You MUST install correct thawte Intermediate CA file on your server for your SSL certificate to work and be fully supported in all web browsers.
Skip to step 3 If you have already downloaded the CA file otherwise select your SSL product type below to download the thawte Intermediate CA (Right Click on link & Save)

Step 3 - Create a Certificate Snap-in:
Note: Please ensure for step 8 to select 'Computer Account', selecting any other option will result in a failed installation.
  1. From the Web Server, Click Start > Run
  2. Type in MMC and Press Enter
  3. Click OK
  4. From the Microsoft Management Console (MMC) menu bar, Click File (in IIS 6.0) or Console (in IIS5.0) > Add/Remove Snap-in
  5. Click Add
  6. From the list of snap-ins, Select Certificates
  7. Click Add
  8. Select Computer Account
  9. Click Next
  10. Select Local Computer (the computer this console is running on)
  11. Click Finish
  12. In the snap-in list window, Click Close
  13. In the Add/Remove Snap-in Window, Click OK

Step 4 - Install the thawte Intermediate CA file:
  1. From the left pane, Expand the 'Intermediate Certification Authorities' folder
  2. Right-Click on 'Certificates' folder
  3. Click All Tasks > Import
  4. In the Certificate Import Wizard, Click Next
  5. Click on Browse and locate the Intermediate CA Certificate File (The PKCS#7 file you downloaded in step 2)
  6. Click Next
  7. Select option 'Place all certificates in the following store'
  8. Click Browse button and select 'Intermediate Certification Authorities'
  9. Click OK
  10. Click Next
  11. Click Finish
  12. Keep the Certifcate Snap-in open as you will need it to complete step 5.


Please download the Thawte Intermediate CAs for your SSL certificate here:
https://search.thawte.com/support/ssl-digital-certificates/index?page=content&id=AR1371

If you require the CA bundle version of the Intermediate CAs, please download it here:
https://search.thawte.com/support/ssl-digital-certificates/index?page=content&id=AR1372

3. CHECK INSTALLATION:
Ensure you have installed your certificate correctly at:
https://search.thawte.com/support/ssl-digital-certificates/index?page=content&id=SO9555

4. INSTALL THE THAWTE TRUSTED SEAL:
Additionally, as part of your SSL Certificate Service, you are entitled to display the Thawte Trusted Seal - recognised across the Internet and around the world as a symbol of authenticity, security, and trust - to build consumer confidence in your Web site.

Installation instructions for the Thawte Trusted Seal can be found on the following link:
http://www.thawte.com/ssl/secured-seal/installation-agreement/index.html

Visit the Thawte Support Web site, where you will find a range of support tools to help you:
https://search.thawte.com/support/ssl-digital-certificates/index.html


REFERENCES

https://search.thawte.com/support/ssl-digital-certificates/index?page=content&actp=CROSSLINK&id=SO15447