title: Creating certificate chain on keytool or Keystore Explorer
body: <p>I have a certificate issued by a CA "GeoTrust". According to their website I must include two more intermediate certificates in order to create a certificate chain. The goal is to establish "TLS" with Firebase Cloud messaging. </p>
  
  <p>I have Keystore Explorer. I opened the keystore whose key was validated by GeoTrust when they issued me the free-trial SSL certificate. </p>
  
  <p>On the keypair icon in Keystore Explorer I right clicked and then selected "import CA reply from file" I selected the file that was issued by Geotrust to me for my keystore. Keystore Explorer says that the public keys matched in both my keystore public key and their issued Free Trial SSL certificate. Now, how in the world do I include the other two intermediate certificates using keystore explorer. I have been following this stackoverflow answer <strong><em><a href="https://stackoverflow.com/questions/30634658/how-to-create-a-certificate-chain-using-keytool">How to create a certificate chain using keytool?</a></em></strong>  but i see that in there you have to create different keypairs which ask you to create different common names. I don't think that is the right way in order to include my intermediate certificates. Could someone please point me in the right direction.  This process of establishing "TLS" handshake with keystores is getting very annoying on top of that I must establish SASL plain authentication with Firebase CCS which is probably even more annoying since I have to somehow create a server to do that. </p>
  
  <p>Any help or suggestions would be helpful.</p>