Sectigo Madness

# Info

## Sectigo Madness

### chain.crt

cat c1.crt c2.crt c3.crt c4.crt >c0.crt

* c1.crt: Root Zertifikat
* c2.crt: Indermediate 1
* c3.crt: Intermediate 2
* c4.crt: Host Zertifikat

### issuer.crt

cat i1.crt i2.crt i3.crt        >i0.crt

* i1: Host Zertifikat
* i2: Intermediate 2
* i3: Indermediate 1

ANM: das issuer.crt kann direkt an den nginx verfuettert werden.
z.B.: scp issuer.crt adminp7@netbox01.univie.ac.at:fullchain_netbox.univie.ac.at.crt

### achache_chain.crt

cat c3.crt c2.crt >apache_chain.crt

ANM: Apache will nur die Intermediates als SSLCertificateChainFile haben, in der Reihenfolge Intermediate2, Intermediate 1.

### 

* c1 == Root Zertifikat
* c2 == i3 == Intermediate 1
* c3 == i2 == Intermediate 2
* c4 == i1 == Host Zertifikat

## md5sums

```
5d8c3985f05cad83f926058358a8455a  apache_chain.crt
154648d02c89cf3ad69612602247d0cf  c4.crt
154648d02c89cf3ad69612602247d0cf  i1.crt
154648d02c89cf3ad69612602247d0cf  netbox.univie.ac.at.crt C=AT, ST=Wien, L=Wien, O=Universit\xC3\xA4t Wien, CN=netbox.univie.ac.at
1ebb0b57e3d9d6767a99d246d440a9ad  c3.crt C=NL, O=GEANT Vereniging, CN=GEANT OV RSA CA 4
1ebb0b57e3d9d6767a99d246d440a9ad  i2.crt
9f0703dfe1f7962a44351d18ea5deaab  chain.crt
36be211409fac989eb86cf197080da15  c2.crt C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority
36be211409fac989eb86cf197080da15  i3.crt
a22a580eec5fdd8e3f2a066c1c5a1a5c  c1.crt C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services
de95e19e22d29335b9d39ac709e32e28  issuer.crt
```