Page History

...

The key things to be searching for are,

1. Download of the root CA certificate
2. Determination if any chain certificates are required and where to download them

...

The diff command did not return any differences sowhich means that the files match exactly. As such, StartCom_Certification_Authority.pem may be used.

Next continue on to see if the chain certificate already exists in the Ubuntu Certificate Repository.

wget http://www.startssl.com/certs/sub.class1.server.ca.pem
diff sub.class1.server.ca.pem /etc/ssl/certs/StartCom_Ltd..pem
2,35c2,29
< MIIGNDCCBBygAwIBAgIBGDANBgkqhkiG9w0BAQUFADB9MQswCQYDVQQGEwJJTDEW
< MBQGA1UEChMNU3RhcnRDb20gTHRkLjErMCkGA1UECxMiU2VjdXJlIERpZ2l0YWwg

Returned differences so move on to the next likely file,

diff sub.class1.server.ca.pem /etc/ssl/certs/StartSSL_Sub_Class1_CA.pem

Is a match meaning StartSSL_Sub_Class1_CA.pem is should be used for the chain certificate.

SSL Process

...