Every root CA certificate is the reason that SSL certificates are regarded as the standard basis for website security today. Considering cybercrime damages are projected to reach $6 trillion annually by 2021, keeping your business’s cyber security measures in check should be at the top of your priority list.
root
What are Comodo Root and Intermediate Certificates?
Understanding the parts of the Comodo Certificate Chain
In order to be trusted, every SSL certificate must chain back to a trusted root. This is called the certificate chain and it’s crucial to your SSL certificate working correctly. This usually means downloading & installing the Comodo intermediate certificate at the same time you install SSL. You usually don’t need to install the Comodo root certificate.
The Chain of Trust
This screenshot shows how the certificate on this website chains back to the Comodo Root & Intermediate certificates.
- Comodo Root Certificate. Every browser has a root store, a database of pre-downloaded root certificates from trusted Certificate Authorities, including Comodo.
- Comodo Intermediate Certificate. An intermediate root serves as a link in the chain of trust, helping SSL certificates to chain back to roots.
- Your Comodo SSL Certificate. This is the certificate that actually secures your website. All SSL certificates must chain back to a trusted root in order to be validated by the user’s web browser.
Why so many Intermediates?
A trusted root is an extremely valuable entity, so valuable that most CAs refuse to issue directly from one. Rather, the CAs create intermediate roots for their own use, or to be leased out to other CAs. Because of this model, it’s rather common during the SSL installation process that you may be asked to install an intermediate certificate, or an intermediate bundle (a group of intermediate certificates) to help fill out the certificate chain.
Download & Install the Comodo Intermediate Certificate
Installing an intermediate certificate is simple and is typically accomplished in the same way you would install in any other SSL certificate. For instructions on how to download and install a Comodo Intermediate, follow the link below.
Download the Comodo Intermediate Certificate
