Fix depth lookup:unable to get issuer certificate

The printable version is no longer supported and may have rendering errors. Please update your browser bookmarks and please use the default browser print function instead.

Fix depth lookup:unable to get issuer certificate

   KB 21724        Last updated on 2022-06-1  

(0 votes)

See also:


Solve a common problem, depth lookup:unable to get issuer certificate, with SSL certificates when trying to:

  • Install a new SSL certificate.
  • Install a wildcard SSL certificate from another server.
  • Install an SSL certificate from another server: moved or restored from a backup.
  • Renew an SSL certificate, when the intermediate CA was changed from the SSL provider.


This error means the certificate path or chain is broken and you are missing certificate files. In most cases, the intermediate cert or root CA is affected. Right now, almost every SSL vendor has 2 or more CA Intermediates - sha1 and sha2 (256).

The best solution is to ask for the most updated root CA and intermediate certificates from the SSL provider. Then place all of them in a file, in order, and try again. Mix the root CA and the Intermediate (Comodo example):

cat ComodoRSAca_ROOT.crt ComodoRSAca_inter1.crt ComodoRSAOrgValidationca_inter2.crt > ca_bundle.crt

Copy the CA Bundle to the proper path:

sudo cp ca_bundle.crt /opt/zimbra/ssl/zimbra/commercial/commercial_ca.crt

Verify the SSL certificate against the private key:

sudo /opt/zimbra/bin/zmcertmgr verifycrt comm commercial.key commercial.crt

Deploy the SSL certificate>

sudo /opt/zimbra/bin/zmcertmgr deploycrt comm ca_bundle.crt

Check the deployed SSL certificate>

sudo /opt/zimbra/bin/zmcertmgr viewdeployedcrt

Additional Content

  • No additional content

Verified Against: Zimbra Collaboration 8.5, 8.6 Date Created: 02/20/2015
Article ID: Date Modified: 2022-06-01

Try Zimbra

Try Zimbra Collaboration with a 60-day free trial.
Get it now »

Want to get involved?

You can contribute in the Community, Wiki, Code, or development of Zimlets.
Find out more. »

Looking for a Video?

Visit our YouTube channel to get the latest webinars, technology news, product overviews, and so much more.
Go to the YouTube channel »

Wiki/KB reviewed by Fred Phil Jenny Last edit by Barry de Graaff
Jump to: navigation, search