Some customers have reported receiving an untrusted certificate warning when visiting the company's website. The administrator ensures that the certificate is not expired and that customers have…

Question

Options

• AThe intermediate CA certificates were not installed on the server.
• BThe certificate is not the correct type for a virtual server.
• CThe encryption key used in the certificate is too short.
• DThe client's browser is trying to negotiate SSL instead of TLS.

• A
  81% (34)
• B
  2% (1)
• C
  10% (4)
• D
  7% (3)

Explanation

This is a classic certificate chain of trust problem. Most public certificates are not issued directly by a Root CA but by an Intermediate CA that sits between the server certificate and the trusted Root CA. Browsers require the complete chain - server certificate → intermediate CA(s) → root CA - to validate trust. If the server is not configured to send the intermediate CA certificates along with its own certificate, the browser cannot build the trust chain to the root, even if the root CA is trusted. The result is an 'untrusted certificate' warning. The admin confirmed the root issuer is trusted by customers, which points directly to a missing intermediate certificate as the gap. This is one of the most common TLS misconfiguration issues in practice. The other options (certificate type, key length, SSL/TLS negotiation) would produce different and unrelated error messages.

No community discussion yet for this question.