{"action":"created","issue":{"url":"https://api.github.com/repos/Lone-Coder/letsencrypt-win-simple/issues/177","repository_url":"https://api.github.com/repos/Lone-Coder/letsencrypt-win-simple","labels_url":"https://api.github.com/repos/Lone-Coder/letsencrypt-win-simple/issues/177/labels{/name}","comments_url":"https://api.github.com/repos/Lone-Coder/letsencrypt-win-simple/issues/177/comments","events_url":"https://api.github.com/repos/Lone-Coder/letsencrypt-win-simple/issues/177/events","html_url":"https://github.com/Lone-Coder/letsencrypt-win-simple/issues/177","id":144017845,"number":177,"title":"Missing Chain Cert","user":{"login":"DusterLag","id":18121427,"avatar_url":"https://avatars.githubusercontent.com/u/18121427?v=3","gravatar_id":"","url":"https://api.github.com/users/DusterLag","html_url":"https://github.com/DusterLag","followers_url":"https://api.github.com/users/DusterLag/followers","following_url":"https://api.github.com/users/DusterLag/following{/other_user}","gists_url":"https://api.github.com/users/DusterLag/gists{/gist_id}","starred_url":"https://api.github.com/users/DusterLag/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/DusterLag/subscriptions","organizations_url":"https://api.github.com/users/DusterLag/orgs","repos_url":"https://api.github.com/users/DusterLag/repos","events_url":"https://api.github.com/users/DusterLag/events{/privacy}","received_events_url":"https://api.github.com/users/DusterLag/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/Lone-Coder/letsencrypt-win-simple/labels/question","name":"question","color":"cc317c"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":77,"created_at":"2016-03-28T16:22:24Z","updated_at":"2016-04-09T16:05:58Z","closed_at":null,"body":"I've generated a successful san (usign --san). However the final certificate is missing the \"Let's Encrypt Authority X3\" intermediary. This causes it to be blocked in Firefox and fail the SSL Labs test. (Details below)\r\n\r\n-\r\n\r\nServer Key and Certificate #1\r\nSubject \twww.heatfinder.net\r\nFingerprint SHA1: 532e9892d59ecb1e7476df151a17c76ea3a16618\r\nPin SHA256: 9E/Fer1tJGUXKjGyGK0qWhDRXlnWm6tMXJcUTaz6Sy0=\r\nCommon names \twww.heatfinder.net\r\nAlternative names \thardcoremotorsports.info heatfinder.net hltv.nascarheat.com nascarheat.com nhma.co nhrl.nascarheat.com tms.nascarheat.com www.hardcoremotorsports.info www.heatfinder.net www.nascarheat.com www.nhma.co\r\nValid from \tMon, 28 Mar 2016 14:55:00 UTC\r\nValid until \tSun, 26 Jun 2016 14:55:00 UTC (expires in 2 months and 28 days)\r\nKey \tRSA 2048 bits (e 65537)\r\nWeak key (Debian) \tNo\r\nIssuer \tLet's Encrypt Authority X3\r\nAIA: http://cert.int-x3.letsencrypt.org/\r\nSignature algorithm \tSHA256withRSA\r\nExtended Validation \tNo\r\nCertificate Transparency \tNo\r\nRevocation information \tOCSP\r\nOCSP: http://ocsp.int-x3.letsencrypt.org/\r\nRevocation status \tGood (not revoked)\r\nTrusted \tYes\r\n\r\n\r\nAdditional Certificates (if supplied)\r\nCertificates provided \t2 (2758 bytes)\r\nChain issues \tIncomplete, Extra certs\r\n#2\r\nSubject \tLet's Encrypt Authority X1\r\nFingerprint SHA1: 3eae91937ec85d74483ff4b77b07b43e2af36bf4\r\nPin SHA256: YLh1dUR9y6Kja30RrAn7JKnbQG/uEtLMkBgFF2Fuihg=\r\nValid until \tMon, 19 Oct 2020 22:33:36 UTC (expires in 4 years and 6 months)\r\nKey \tRSA 2048 bits (e 65537)\r\nIssuer \tDST Root CA X3\r\nSignature algorithm \tSHA256withRSA\r\n\r\n\r\nCertification Paths\r\nPath #1: Trusted\r\n1 \tSent by server \twww.heatfinder.net\r\nFingerprint SHA1: 532e9892d59ecb1e7476df151a17c76ea3a16618\r\nPin SHA256: 9E/Fer1tJGUXKjGyGK0qWhDRXlnWm6tMXJcUTaz6Sy0=\r\nRSA 2048 bits (e 65537) / SHA256withRSA\r\n2 \tExtra download \tLet's Encrypt Authority X3\r\nFingerprint SHA1: e6a3b45b062d509b3382282d196efe97d5956ccb\r\nPin SHA256: YLh1dUR9y6Kja30RrAn7JKnbQG/uEtLMkBgFF2Fuihg=\r\nRSA 2048 bits (e 65537) / SHA256withRSA\r\n3 \tIn trust store \tDST Root CA X3   Self-signed\t\r\nFingerprint SHA1: dac9024f54d8f6df94935fb1732638ca6ad77c13\r\nPin SHA256: Vjs8r4z+80wjNcr1YKepWQboSIRi63WsWXhIMN+eWys=\r\nRSA 2048 bits (e 65537) / SHA1withRSA\r\nWeak or insecure signature, but no impact on root certificate"},"comment":{"url":"https://api.github.com/repos/Lone-Coder/letsencrypt-win-simple/issues/comments/207813222","html_url":"https://github.com/Lone-Coder/letsencrypt-win-simple/issues/177#issuecomment-207813222","issue_url":"https://api.github.com/repos/Lone-Coder/letsencrypt-win-simple/issues/177","id":207813222,"user":{"login":"Rouzax","id":4103090,"avatar_url":"https://avatars.githubusercontent.com/u/4103090?v=3","gravatar_id":"","url":"https://api.github.com/users/Rouzax","html_url":"https://github.com/Rouzax","followers_url":"https://api.github.com/users/Rouzax/followers","following_url":"https://api.github.com/users/Rouzax/following{/other_user}","gists_url":"https://api.github.com/users/Rouzax/gists{/gist_id}","starred_url":"https://api.github.com/users/Rouzax/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Rouzax/subscriptions","organizations_url":"https://api.github.com/users/Rouzax/orgs","repos_url":"https://api.github.com/users/Rouzax/repos","events_url":"https://api.github.com/users/Rouzax/events{/privacy}","received_events_url":"https://api.github.com/users/Rouzax/received_events","type":"User","site_admin":false},"created_at":"2016-04-09T16:05:58Z","updated_at":"2016-04-09T16:05:58Z","body":"I have a similar issue but for me it is Chrome on Android that gives the invalid warning.\r\n![image](https://cloud.githubusercontent.com/assets/4103090/14404704/47fb9564-fe7d-11e5-9c85-a71e4abf9007.png)\r\n![image](https://cloud.githubusercontent.com/assets/4103090/14404708/5bb1397e-fe7d-11e5-8ca5-b28d8be59e6b.png)\r\n![image](https://cloud.githubusercontent.com/assets/4103090/14404712/73332166-fe7d-11e5-8e9a-007bd62e885a.png)\r\n![image](https://cloud.githubusercontent.com/assets/4103090/14404724/b3ba9c5a-fe7d-11e5-9562-e3eb16d002b8.png)\r\n\r\n\r\n"}}