Certificate Startcom

Question

Hi, 
 I created a free StartSSL certificate and I succesfully uploaded it in the Sophos XG. I did the same for the CA, but still my certificate is untrusted by my XG. I think I got the wrong CA but im not sure. 
 Greets, 
 Jeffrey

AlanT · Accepted Answer

Hi Jeffrey, 
 
 The X means that you've installed an intermediate cert, but something is missing in it's cert chain. You can get all their root certs here: 
 https://www.startcomca.com/root 
 I don't know which one(s) you might be missing, but hopefully the cert you have, plus the charts on the link above help identify what you're missing. I have used StartCom before, and had to install two or three different root and intermediate certs to make everything happy.