title: StartSSL certificate not trusted in Firefox and on Android
body: <p>Apache server, followed the guide from here: <a href="https://www.startssl.com/Support?v=21" rel="nofollow">https://www.startssl.com/Support?v=21</a></p>
  
  <p>httpd.conf:</p>
  
  <pre><code>SSLEngine on
  SSLProtocol all -SSLv2 -SSLv3
  SSLCipherSuite ALL:!DH:!EXPORT:!RC4:+HIGH:+MEDIUM:!LOW:!aNULL:!eNULL
  SSLCertificateFile "/usr/local/apache2/conf/domain.crt"
  SSLCertificateKeyFile "/usr/local/apache2/conf/private.key"
  SSLCertificateChainFile "/usr/local/apache2/conf/1_root_bundle.crt"
  </code></pre>
  
  <p>Works fine in Chrome but Firefox yields the following error:</p>
  
  <pre><code>Error code: SEC_ERROR_UNKNOWN_ISSUER
  </code></pre>
  
  <p>Analysis at <a href="https://www.sslshopper.com/ssl-checker.html" rel="nofollow">https://www.sslshopper.com/ssl-checker.html</a> says the following: </p>
  
  <p><em>The certificate is not trusted in all web browsers. You may need to install an Intermediate/chain certificate to link it to a trusted root certificate. Learn more about this error. You can fix this by following StartCom's Certificate Installation Instructions for your server platform. Pay attention to the parts about Intermediate certificates.</em></p>
  
  <p>How can I make the chain valid? </p>