Trouble installing origin CA on Easywp

I’ve generated an Origin cert to install on a host at Easywp.com

After uploading the key and cert, I get the error that cert doesnt match domains.

I used a cert checker, and it tells me there is no intermediate cert, that’s why it can’t verify the origin cert.

I spoke to Easywp support, and they told me that I need a CA bundle for the the Origin cert to be verified, and that I just need to paste the Intermediate cert at the end of my Origin cert.pem

Now, I don’t see an Intermediate cert anywhere, just the cloudflare Root CA (RSA), which I tried pasting into the end of my origin cert, but I still get an error when tryng to install. Now, when I try to decode the combined origin/root pem using a decoder tool, it gives an error that it can’t be decoded.

Any suggestions?

The Origin certificate should be directly signed by that root certificate, hence there shouldnt be any intermediate certificate.

Can you post your certificate (NOT the key)?

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

And this is the result from the cert checker: https://decoder.link/result/3acb33ab69560baf24e15733e6255ed14e8b3c7e

And you have tried add the root certificate from https://support.cloudflare.com/hc/en-us/articles/115000479507-Managing-Cloudflare-Origin-CA-certificates#h_30cc332c-8f6e-42d8-9c59-6c1f06650639 too?

Yes, I’ve tried to make them a bundle, and decoder gives me error that it cant be decoded, results here: https://decoder.link/result/bb17d02a8bcd2af5c4b1b6d6d216094f2dddd82d

Doesn’t matter if I poot root ca before or after my cert in the bundle

The decoder does not seem to support that, but your host hopefully does.

Your certificate along with the root certificate should be accepted, if your host does not accept it they should explain why not.

This topic was automatically closed after 31 days. New replies are no longer allowed.