24 Apr 2014 
Comodo Support Home |
Support Center » Knowledgebase » Which is Root? Which is Intermediate?
 Which is Root? Which is Intermediate?
Solution Question: I have received one or more files in my ZIP file from Comodo. How do I know which is which?

Answer: You will receive a ZIP file from us containing: Root, Intermediate(s), and domain/end-entity certificate. The name(s) of the file(s) will depend on the type of certificate you obtain from us and the server software that was selected during purchase.

Current Comodo Certificate Hierarchies


» EV/EV SGC SSL
    » Root: AddTrustExternalCARoot.crt
    » Intermediate 1: COMODOAddTrustServerCA.crt
    » Intermediate 2: COMODOExtendedValidationSecureServerCA.crt
    » End-Entity/Domain Certificate

» InstantSSL/IntranetSSL/EnterpriseSSL/Unified Communications (UCC)
    » Root: AddTrustExternalCARoot.crt
    » Intermediate: ComodoHigh-AssuranceSecureServerCA.crt
    » End-Entity/Domain Certificate

» ComodoSSL / ComodoSSL Wildcard / ComodoSSL UCC
    » Root: AddTrustExternalCARoot.crt
    » Intermediate: ComodoSSLCA.crt
    » End-Entity/Domain Certificate

» EssentialSSL / Free Certificate
    » Root: AddTrustExternalCARoot.crt
    » Intermediate 1: UTNAddTrustSGCCA.crt
    » Intermediate 2: ComodoUTNSGCCA.crt
    » Intermediate 3: EssentialSSLCA_2.crt
    » End-Entity/Domain Certificate

» PositiveSSL
    » Root: AddTrustExternalCARoot.crt
    » Intermediate: PositiveSSLCA2.crt
    » End-Entity/Domain Certificate


» Code Signing
    » Root: AddTrustExternalCARoot.crt
    » Intermediate 1: UTNAddTrustObject_CA.crt
    » Intermediate 2: COMODOCodeSigningCA2.crt
    » Your Code Signing Certificate

    Kernel Mode Code Signing (KMCS) Cross-Signed CAs for Microsoft Systems
      » AddTrustExternalCARoot_kmod.crt (AddTrust External CA Root)
      » UTN-USERFirst-Object_kmod.crt (UTN-USERFirst-Object)
      » COMODORSACertificationAuthority_kmod.crt (COMODO RSA Certification Authority)



Previous Certificate Hierarchies used by Comodo


» PositiveSSL
Prior to 23 February 2012
    » Root: AddTrustExternalCARoot.crt
    » Intermediate 1: UTNAddTrustServerCA.crt
    » Intermediate 2: PositiveSSLCA.crt
    » End-Entity/Domain Certificate

» Code Signing
Prior to 2 June 2011
    » Root: UTN-USERFirst-Object.crt
    » Your Code Signing Certificate

» EV/EV SGC SSL
Prior to 26 May 2010
    » Root: AddTrustExternalCARoot.crt
    » Intermediate 1: UTNAddTrustSGCCA.crt
    » Intermediate 2: ComodoUTNSGCCA.crt
    » Intermediate 3: ComodoEVSGCCA.crt
    » End-Entity/Domain Certificate

» Instant/Premium/Intranet/Enterprise SSL
Used between 19 March 2009 and 26 May 2010
    » Root: AddTrustExternalCARoot.crt
    » Intermediate 1: UTNAddTrustSGCCA.crt
    » Intermediate 2: ComodoUTNSGCCA.crt
    » Intermediate 3: ComodoHighAssuranceSecureServerCA.crt
    » End-Entity/Domain Certificate

» UCC/Legacy
Prior to 27 Sept 2012
    » Root: EntrustSecureServerCA.crt
    » Intermediate: USERTrustLegacySecureServerCA.crt
    » End-Entity/Domain Certificate

» Unified Communications (UC) / Legacy Certificate
Prior to 1 Dec 2009
    » Root: EntrustSecureServerCA.crt
    » Intermediate: AAACertificateServices_2.crt
    » End-Entity/Domain Certificate

» Instant/Enterprise SSL
Prior to 19 March 2009
    » Root: AddTrustExternalCARoot.crt
    » Intermediate: UTNAddTrustServerCA.crt
    » End-Entity/Domain Certificate

Note:

  1. IIS 4.x and up can use a .cer file. This file contains: Root, Intermediates, and domain certificate; all rolled into one file.

  2. IIS 6.x and up will accept a .crt(end-entity/domain certificate) file, but Root and Intermediate(s) will need to be installed manually.

  3. Apache makes use of a .ca-bundle file. This file contains the Intermediate(s) and sometimes Root certificates in a single file.

  4. Some Comodo Partners have their own Comodo certificate hierarchies. If you are unsure of your certificate hierarchy, please contact support by submitting a support ticket



Article Details
Article ID: 1182
Created On: 03 Jun 2008 07:19 PM

 This answer was helpful  This answer was not helpful

 Back
 Login [Lost Password] 
Email:
Password:
Remember Me:
 
 Search
 Latest News  
 Article Options
Support Home | Comodo Home | Submit a Ticket | Knowledgebase | Troubleshooter | News | Downloads

by Kayako SupportSuite v3.70.02