title: How to add an intermediate certificate to a pfx file
body: <p>I've been using a certificate that's stored on the server in a myserver.pfx file.</p>
  
  <p>However, behavior is not the same in all browsers and some complain on account of, I think, a missing 'intermediate' certificate.</p>
  
  <p>I've downloaded the intermediate certificate from Gandi: GandiStandardSSLCA.pem</p>
  
  <p>Now, my question is, how can I add that intermediate certificate into the pfx file?</p>
  
  <p>Although the server is windows, I'm trying to use openssl on a linux machine to manipulate the certificates, just because that's where I have openssl available. I'm assuming this doesn't matter.</p>
  
  <p>One thing I've tried, is to use openssl to export myserver.pfx to myserver.pem, a text file. Then, with a text editor, I've added the text of GandiStandardSSLCA.pem to myserver.pem in hopes of then converting back to pfx format. However, I couldn't get openssl to do that conversion back to pfx.</p>
  
  <p>Is this possible? If so, at the text editing stage, does it matter if the intermediate certificate text goes at the beginning or the end? Also, would I need to manufacture 'Bag Attributes' somehow?</p>
  
  <p>Or, is the whole operation done in one line with openssl?</p>