Missing SSL Intermediate Certificate Chain

Website URL

https://tejodhar.in/

Error Message

Subject: Missing SSL Intermediate Certificate Chain — tejodhar.in

Hello InfinityFree Support,

My domain “tejodhar.in” has an active Google Trust Services SSL certificate, but an SSL checker reports:

“Server did not send a required intermediate CA; the chain completed only because the checker fetched it via the issuer’s AIA URL.”

Termux “curl” reports “unable to get local issuer certificate (20)”, while Google verifies successfully from the same device.

Please check the SSL certificate chain served by the hosting server and configure the required intermediate certificates.

Thank you.

Other Information

Wait for their response before changing or reinstalling certificates.

Welcome to the InfinityFree community forum! Good to have you here.

  • Most people answering here are volunteers. They’re often the fastest source of help. Admin (the only staff member) checks in about once a day for issues on our end.
  • Volunteers can’t see your account or website. Share what you actually see, like error messages and what happens when you try something. That’s more useful than your theory of what’s wrong.
  • AI tools often get InfinityFree wrong. If a volunteer’s advice differs from what an AI told you, please try the volunteer’s suggestion first.
  • Solving an issue is a joint effort. Try the suggestions you get and report back what happened.

Beep boop, I’m a bot! I dug through the forum to get you started. I sometimes get things wrong though, so do with this what you will until a human has a look.

This is expected on free hosting, and there’s nothing for anyone to fix on the server. The certificate chain is served without the intermediate certificate, and installing intermediates isn’t supported on free accounts. It’s only available on premium hosting. Your certificate itself is fine.

Browsers fetch the missing intermediate on their own, which is why Google and normal visitors verify the site without trouble. SSL checkers and programmatic clients like curl in Termux are stricter, so they report “unable to get local issuer certificate”. Our article on this says it only affects testing tools and programmatic access, not your visitors:

If you need curl to work without errors, you’d have to use premium hosting. Otherwise there’s nothing to change, so you can leave the certificate as it is.