StartSSL class 1 certificate not accepted by browser (Weblogic 10.0.1)

Question

I have requested a class 1 certificate from StartSSL and installed it in Weblogic 10.0.1 (see screenshots).

The browsers (Chrome & IE9 on Windows 7, IE8 on XPSP3) still give a certificate error (see screenshots).

I think the StartSSL root certificate is available in several browsers (see here). Please advise.

Answer 1

StartSSL Class 1 certificates are signed by a intermediate CA, which is signed by the StartCom Root CA. For your browser to trust this certificate, it needs to know the trust chain up to the Root CA it already knows.

Your server needs to send the complete trust chain to the browser (minus the Root CA), so your browser can verify that your certificate is trusted.

See the StartSSL FAQ for more info.