SSL · Fix guide
Certificate chain is incomplete
- TLS
- Transport Layer Security
The server did not supply an intermediate certificate chain alongside its leaf certificate.
What does this test measure?
The server did not supply an intermediate certificate chain alongside its leaf certificate.
What to do next
- Install the intermediate bundle supplied by the certificate authority.
- Do not normally send the root certificate.
- Check every CDN edge and origin that terminates TLS.
Useful links
How to verify the fix
Connect with a clean client and confirm it can build a trusted chain without cached intermediates.
When this result may be wrong
Some TLS libraries expose chains differently, so compare this result with another certificate checker.
Ready to check again?
Check a domain
Run a fresh report after DNS caches and platform changes have had time to update.